Revision history for UserAdministration
Revision [1356]
Last edited on 2008-11-20 09:33:50 by NilsLindenberg [clarification how to reach the module]Additions:
[[WikkaReleaseNotes1164 | WikkaWiki 1.1.6.4]] introduces a new system page, **""AdminUsers""** (located in the CategoryAdmin) , accessible by [[WikiAdmin | system administrators]] to facilitate various user management tasks. This code has been extensively beta-tested in previous versions, and has been enhanced for 1.1.6.4 to include user deletions and session management. You can add this module to every wikipage using **""{{adminusers}}""**.
Deletions:
Deletions:
Additions:
[[WikkaReleaseNotes1164 | WikkaWiki 1.1.6.4]] introduces a new system page, **""AdminUsers""**, accessible by [[WikiAdmin | system administrators]] to facilitate various user management tasks. This code has been extensively beta-tested in previous versions, and has been enhanced for 1.1.6.4 to include user deletions and session management.
====Features====
~-Display a pageable, sortable and searchable **list of registered users**, including:
~~-Username and userpage (if any)
~~-Registered email address
~~-Sign-up time
~~-Registration IP address ''(forthcoming)''
~-Display user statistics:
~~-Display user's **owned pages**
~~-Display user's **comments**
~~-Display user's **changes**
~-Allow wiki admins to perform specific actions on single or multiple users:
~~- Remove/ban users
~~- Send users feedback ''(forthcoming)''
~~- Create new users ''(forthcoming)''
===User Account Deletion and Session Management===
====Features====
~-Display a pageable, sortable and searchable **list of registered users**, including:
~~-Username and userpage (if any)
~~-Registered email address
~~-Sign-up time
~~-Registration IP address ''(forthcoming)''
~-Display user statistics:
~~-Display user's **owned pages**
~~-Display user's **comments**
~~-Display user's **changes**
~-Allow wiki admins to perform specific actions on single or multiple users:
~~- Remove/ban users
~~- Send users feedback ''(forthcoming)''
~~- Create new users ''(forthcoming)''
===User Account Deletion and Session Management===
Deletions:
Version 1.1.6.4 introduces a new system page, **""AdminUsers""**, accessible by system administrators to facilitate various user management tasks. This code has been extensively beta-tested in previous versions, and has been enhanced for 1.1.6.4 to include user deletions and session management.
====User Account Deletion and Session Management====
Deletions:
Additions:
{{since version="1.1.6.4" align="left"}}
==Sample output==
{{image alt="adminusers screenshot" title="Sample output for adminusers action" url="images/adminusers.png"}}
==Sample output==
{{image alt="adminusers screenshot" title="Sample output for adminusers action" url="images/adminusers.png"}}
Deletions:
Deletions:
Additions:
{{files}}
Additions:
====User Account Deletion and Session Management====
Users may be inactivated either individually or in bulk (such as might occur with a scripted registration attack) by using the **Delete** functionality. User accounts are not actually deleted (useful for later reactivation or for post-forensic analysis), but are rather marked in the database as deleted. As such, these users will not be recognized by the system, and additional attempts to re-register the same user will fail.
These are the steps that are taken by the system when a user is inactivated/deleted:
1) The user's password is changed to a value that can never be matched by any password.
1) The user's account is flagged as "deleted".
1) The user's most recent session is immediately closed. This ensures that a user cannot continue to access the system via an existing session cookie.
- Deleted user accounts can only be restored by direct access to the wiki database. A future version of this module will permit the restoration of user access via the user administration panel.
Users may be inactivated either individually or in bulk (such as might occur with a scripted registration attack) by using the **Delete** functionality. User accounts are not actually deleted (useful for later reactivation or for post-forensic analysis), but are rather marked in the database as deleted. As such, these users will not be recognized by the system, and additional attempts to re-register the same user will fail.
These are the steps that are taken by the system when a user is inactivated/deleted:
1) The user's password is changed to a value that can never be matched by any password.
1) The user's account is flagged as "deleted".
1) The user's most recent session is immediately closed. This ensures that a user cannot continue to access the system via an existing session cookie.
- Deleted user accounts can only be restored by direct access to the wiki database. A future version of this module will permit the restoration of user access via the user administration panel.
