nextcloud / server

☁️ Nextcloud server, a safe home for all your data
https://nextcloud.com
GNU Affero General Public License v3.0
26.91k stars 4.02k forks source link

Auto-disable unused users #44393

Open ggbce opened 6 months ago

ggbce commented 6 months ago

Describe the solution you'd like In administration panel, under security, have an option linked to a background task to disable unused users. This option should have an exception on a specific admin user or all users in administrators group to ensure these users lost the management access at all ;)

Describe alternatives you've considered Actually, the only method to make this job is to use the WebUI interface of all users, take a look to "Last connection" time column then disable those are not connected since 6 months, 1 year, etc (depending of the trigger we would)

Additional context The WebUI interface doesn't allow to sort the columns in users list, it's very hard to make this checkup manually when we have hundred of users. The WebUI didn't give the "When Created" time also... The it's very hard to determine when the "Last connection" time is "never" if those users are created sinc more than the trigger. Add this additionnal colum + allow sorting columns could be an alternative (still manual)... but giving us better management !

Security is always a challenge, manage accounts is important to be done !

solracsf commented 6 months ago

Did you try https://apps.nextcloud.com/apps/user_retention ?

ggbce commented 6 months ago

I'm perplex, this app is not visible from apps in my own NextCloud server under security packages... but I can download a tarball package from NextCloud. This can be explained because is not an official or certified package ?

Also, I'm not sure if this app do what I would. It tell: Accounts and files will be deleted not accounts will be disabled... and settings says days before disabling ? 🙃

Glenn Gagné Analyste informatique DRI-Infrastructure (serveurs) et Officier de sécurité technique (A-COMSI) CISSS de Chaudière-Appalaches @.*** Bureau: 418-338-7777 x54410 Mobile: 418-341-0516


From: solracsf @.> Sent: Friday, March 22, 2024 7:58:38 AM To: nextcloud/server @.> Cc: Glenn Gagné (CISSSCA DRI) @.>; Author @.> Subject: Re: [nextcloud/server] Auto-disable unused users (Issue #44393)

Avertissement automatisé : Ce courriel provient de l'extérieur de votre organisation. Ne cliquez pas sur les liens et les pièces jointes si vous ne reconnaissez pas l'expéditeur.

Did you try https://apps.nextcloud.com/apps/user_retention ?

— Reply to this email directly, view it on GitHubhttps://github.com/nextcloud/server/issues/44393#issuecomment-2014928788, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AEHSOF5XSSTB5HEHQ4K7LTTYZQMG5AVCNFSM6AAAAABFB47XMCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDAMJUHEZDQNZYHA. You are receiving this because you authored the thread.Message ID: @.***>


Avis de confidentialité : Les renseignements contenus dans le présent courriel incluant les pièces jointes peuvent contenir des renseignements confidentiels ou protégés en vertu de la loi ou visés par le secret professionnel. Si vous n'êtes pas le destinataire prévu, veuillez prendre note que la divulgation, la distribution ou la reproduction de cette communication est strictement interdite. Si vous avez reçu cette communication par erreur, veuillez immédiatement en avertir l'expéditeur par téléphone ou par courriel et supprimer la communication de votre appareil fixe ou mobile, sans en faire de copie.

joshtrichards commented 6 months ago

I'm perplex, this app is not visible from apps in my own NextCloud server under security packages... but I can download a tarball package from NextCloud. This can be explained because is not an official or certified package ?

You can find it when you search for it. It happens to not be in the Security category however. It's under Organization it looks like.

Also, I'm not sure if this app do what I would. It tell: Accounts and files will be deleted not accounts will be disabled... and settings says days before disabling ? 🙃

https://github.com/nextcloud/user_retention?tab=readme-ov-file#-account-retention-formerly-user-retention