Skip to content

Accounts Info

tkaixiang edited this page Jan 4, 2022 · 10 revisions

For Users:

Managing my Account

Simply headed over to the Settings page by clicking on the blue area on the sidebar and the Settings button. There are 3 operations:

  • Upload a profile picture for your account (Note: This will require a refresh of a browser's tab to reload the cache)
  • Change your password
  • Change Email
  • Delete your own account

For Admins:

General Notes

  • Usernames & emails must be unique

Managing Accounts

You can perform the following operations on accounts inside the Users admin panel:

  • Delete any number of accounts
    • This will remove any transaction records by that user and also any challenges created by that user
  • Change the permissions of users
  • Change the password of users
  • Change the email of users
  • Verify/unverify users
    • *Note: For this option, users are automatically sent a new verification email if email verification is required and you unverify that user

Types of Accounts 🦸

There are 3 types of accounts in Sieberrsec Training Platform.

  • 0 - Normal User: Has access to the basic functions and nothing else
  • 1 - Challenge Creator User: Has the additional power of submitting new challenges, but not modifying existing ones
  • 2 - Admin User: Has full access to the platform via the admin panel. Can see hidden challenges

Account permissions can be changed inside the admin panel by an Admin User. An admin account is automatically created on start-up if none are detected in the database (the login details can be found in the ctf-web-api Docker logs).

Various Settings 🔧

Disable User Registration 🚫

Prevents new users from signing up on the register page.

  • Admins can still create new accounts via the admin sign up page inside the Users admin panel.

Disable User Logins🚫

Prevents non-admin users from logging in

  • Limitations: This function will only prevent users that have yet to login. Users that are already authenticated and have their token will still be able to access the platform.
  • If you want to prevent a specific user from accessing the platform, simply delete their account.

Disable Admin Scores 💯 🚫

Prevents users from seeing the scores of any admins. Useful if you want to hide your admins from affecting the scoreboard

Profile Picture Max Upload Size 🖼️

Limits the maximum profile picture size allowed for the users' profile picture (in Bytes).

  • Set to 0 if you do not want users to upload their own profile pictures
  • You can change the default profile picture by replacing the default profile picture. More info in installation

Profile Picture Upload Path 🖼️

Sets where profile pictures are saved inside the docker.

  • Modifying this path will require you to modify the Dockerfile to point the volumes to this new path as well. Only edit if you know what you are doing

Max Team Size 🎎

Sets the maximum number of members inside a team

  • Note that modifying this setting will not kick out any members in teams which are over the limit

Enable Teams 🎎

This enables team mode for the platform.

  • Users in the same team will have their scores combined
  • Individuals need not join a team to continue playing

Disable Team Switching 🎎

Prevents users from leaving, joining & creating a team. You can use this option to prevent team changes during a competition

Enable Password Reset 🔏

This enables the "I forgot my password" option in case users forget their password.

  • Note: Please ensure that your SMTP server is correctly setup in Email Settings

User Category Management 🗳️

Add/Remove "User Categories"

  • User categories are used to seperate users into different scoreboards (e.g if you want to seperate university/high school students).
  • Users can view the scoreboard for a specific category of users inside Scoreboard by clicking on the dropdown on the top-right.
  • Users can switch their category inside Settings

Disable Category Switches 🚫

Prevents users from switching their category inside Settings

  • Useful if you want to prevent category changes during a competition

Enable Email Verification 📧

This forces users to verify their email after creating an account in order to log into the platform

  • This does not affect existing users who might not have previously verified their email before
  • Note: Please ensure that your SMTP server is correctly setup in Email Settings