mahara-contributors team mailing list archive

[Mahara Bot <890929@xxxxxxxxxxxxxxxxxx>]

Reviewed:  https://reviews.mahara.org/959
Committed: http://gitorious.org/mahara/mahara/commit/81f262545f937074987581e5606cbe6aa8013c5c
Submitter: Francois Marier (francois@xxxxxxxxxxxxxxx)
Branch:    master

commit 81f262545f937074987581e5606cbe6aa8013c5c
Author: Richard Mansfield <richard.mansfield@xxxxxxxxxxxxxxx>
Date:   Thu Dec 22 10:23:41 2011 +1300

    Expire users when they've been inactive for too long (bug #890929)
    
    The "Default account inactivity time" setting allows the admin to
    specify a time period after which users who have not used the site
    will be unable to login, but this is not currently enforced.
    
    This change modifies the inactivity cron job to set the expiry date to
    the current date for any user who has been inactive for longer than
    the 'defaultaccountinactiveexpire' period.  It also now considers the
    lastaccess and ctime fields as well as the lastlogin field.
    
    This allows the admin to reactivate inactive users by resetting their
    expiry dates in account settings.
    
    The active column on the user table is currently only used to decide
    whether users should be displayed in search results, and users are set
    to inactive whenever they are deleted, suspended, or expire.
    
    Change-Id: Ieaf7a0b36865af726fc2526895146373efbb2741
    Signed-off-by: Richard Mansfield <richard.mansfield@xxxxxxxxxxxxxxx>

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
https://bugs.launchpad.net/bugs/890929

Title:
  When a user is expired due to inactivity, they can still log in

Status in Mahara ePortfolio:
  In Progress

Bug description:
  In the cronjob auth_handle_account_expiries, users that haven't logged
  in since the config option defaultaccountinactiveexpire get
  deactivated. This sets the active flag in the usr table.

  One would think that being inactive would mean that the user could no
  longer login, but they still can. Especially because the email sent
  out before you become inactive is as follows:

  "Dear Admin User (admin),

  Your account on Mahara will become inactive within 7 days.

  Once inactive, you will not be able to log in until an administrator
  re-enables your account.

  You can prevent your account from becoming inactive by logging in.

  Regards, Mahara Site Administrator

  Please do not reply to this message.
  "

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/890929/+subscriptions