-
-
Notifications
You must be signed in to change notification settings - Fork 5.5k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Allow disable part user settings #20549
base: main
Are you sure you want to change the base?
Allow disable part user settings #20549
Conversation
Codecov Report
@@ Coverage Diff @@
## main #20549 +/- ##
==========================================
- Coverage 46.94% 46.85% -0.10%
==========================================
Files 978 980 +2
Lines 135489 135838 +349
==========================================
+ Hits 63600 63641 +41
- Misses 64082 64389 +307
- Partials 7807 7808 +1
Help us with your feedback. Take ten seconds to tell us how you rate us. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
typo nits
@noerw @jolheiser done. |
We have just run into a use-case for something similar, but specifically for preventing OAuth'd users from modifying aspects of their profile that are controlled by the provider (password, email address etc). Would an adjustment to this whereby modules could be enabled/disabled depending on the auth type be welcome? |
3b00cd1
to
6810325
Compare
@lunny please resolve conflicts |
More conflicts appeared. |
@@ -1386,6 +1386,16 @@ steps: | |||
|
|||
although Github don't support this form. | |||
|
|||
## User (`user`) | |||
|
|||
- `USER_SETTING_DISABLED_MODULES`:**** Disabled modules from user settings, could be a copmosite of `password`, `deletion`, `security`, `applications`, `gpg keys`, `organizations` with a comma. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
- `USER_SETTING_DISABLED_MODULES`:**** Disabled modules from user settings, could be a copmosite of `password`, `deletion`, `security`, `applications`, `gpg keys`, `organizations` with a comma. | |
- `USER_SETTING_DISABLED_MODULES`: **\<empty\>**: Disabled modules from user settings, could be a copmosite of `password`, `deletion`, `security`, `applications`, `gpg keys`, `organizations` with a comma. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Mind the spelling of copmosite
- `password`: User cannot change his password from the website. | ||
- `deletion`: User cannot remove himself from the website. | ||
- `security`: User cannot update his security settings from the website. | ||
- `applications`: User cannot create application himself. | ||
- `gpg_keys`: User cannot manage gpg keys himself. | ||
- `organizations`: User cannot manage his organizations himself. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
- `password`: User cannot change his password from the website. | |
- `deletion`: User cannot remove himself from the website. | |
- `security`: User cannot update his security settings from the website. | |
- `applications`: User cannot create application himself. | |
- `gpg_keys`: User cannot manage gpg keys himself. | |
- `organizations`: User cannot manage his organizations himself. | |
- `password`: Users cannot change their password from the website. | |
- `deletion`: Users cannot remove themselves from the website. | |
- `security`: Users cannot update their security settings from the website. | |
- `applications`: Users cannot create application themselves. | |
- `gpg_keys`: Users cannot manage gpg keys themselves. | |
- `organizations`: Users cannot manage their organizations themselves. |
…29275) Extract from #20549 This PR added a new option on app.ini `[admin]USER_DISABLED_FEATURES` to allow the site administrator to disable users visiting deletion user interface or allow. This options are also potentially allowed to define more features in future PRs. --------- Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
@lunny Is there a reason that this PR isn't finished? Has it been replaced by something else? I'm happy to contribute if there's more to be done. |
This PR split user settings as
passwod
,deletion
,security
,applications
,gpg keys
,organiztions
modules. And there is a global configuration to allow/disallow users to visit the modules from UI or requests.