Delegate account maintenance to the webapp - Githubissues

thegooddata / social

GNU General Public License v2.0

0 stars 0 forks source link

Delegate account maintenance to the webapp #14

Closed marcosmenendez closed 10 years ago

marcosmenendez commented 10 years ago

In case a user wants to change username, password, avatar, email or newsletter frequency, he should be redirected to the webapp membership details page https://www.thegooddata.org/membership (note that some fields have to be added at request of OA).

All changes done there will be propagated to OA via webservices or any other mean

In case a member is deleted in the webapp, it should also be deleted in OA.

Regarding permissions, only "accepted" members should be allowed to write in OA

josereyero commented 10 years ago

Partly done, see https://github.com/thegooddata/social/issues/13 Some fields should be hidden / disabled on user edit pages. UI needs polishing yet. Ability for administrators to edit local OA accounts still exists though, need to decide whether to remove it completely.

josereyero commented 10 years ago

Btw, forgot to mention. Atm we cannot just disable local profiles because there are some OA only fields in there that need to be editable by users. These are:

Notification settings
Locale settings (Time zone)
Display name
User image, profile, etc...

So I guess we need to have some mixed profiles for now:

User name, login, password, email, status come from master server (Webapp)
Other profile fields are editable locally on OA

josereyero commented 10 years ago

To be implemented, after some team discussion:

Remove user account edit page for regular users (just redirect to Webapp).
Disable user profile images.
Set display name = user name
Set up sensible defaults for all the remaining options there
Keep the page for administrators only.

josereyero commented 10 years ago

Done and deployed to PRE.

Time for testing. (Planning a production release ASAP)

josereyero commented 10 years ago

Btw, removed permission "view user profiles" for authenticated users, in PRE and PROD (It seems they cannot view them now, but just in case...)

josereyero commented 10 years ago

Done. Login and account creation / maintenance can be done only using the webapp.

Note: OA users with "administer users" permission can still see and edit other user accounts -and their own account too- in OA.