Skip to content

Backlog ‐ Brief

Jump to bottom
NicolasGlassey edited this page Jun 25, 2024 · 3 revisions

Backlog - Business approach

Our application will have only one account. This system account will provide administrative access to our iceScrum platform maintenance tool.

Two areas are currently concerned by this maintenance requirement. Firstly, compliance with the license only authorizes use by students or teachers active within our establishment. We therefore need to detect and block any use that does not fall within this rule.

Initially, a file was to be delivered to us by our IT department. This file is useful for updating our students in the Active Directory. However, since the State of Vaud has taken over the management of this task, this option is no longer possible.

We're going to base our decision on the duration of account inactivity.

  • Case 1 - After 2 years we will renew the password and inform the user that he has to change his password.
  • Case 2 - 2 years of inactivity will result in the deletion of the account.

Complete deletion is impossible if the user has a history within the platform. The user's history should be transferred to a "default" account, so as not to destabilize ongoing projects.

The account is associated with an email address not belonging to our company.

  • Case 1 - If the address is @cpnv.ch, change it to @eduvaud.ch and inform the user of the change.
  • Case 2 - This is an external address. The account will now only be accepted if it is present as a "stakeholder". If another profile is detected, the account will be deactivated and the user informed.

Backlog - Technical approach

Users

Story Disable user

Given When Then
A user is present in the system. His account is enabled and the date of his last activity is known. We analyze the last login date and detect that his last activity was less than 2 years ago. No action required.
Given When Then
A user is present in the system. His account is enabled and the date of his last activity is known. We analyze the last login date and detect that his last activity was more than 2 years ago, but less than 4 years ago. The account is disabled.
Given When Then
A user is present in the system. His account is disabled and the date of his last activity is known. We analyze the last login date and detect that the last activity was more than 4 years ago. The account history is transferred to the default user and the account is deleted.

Technical aspects

  • Get the user last login date
curl -X GET -H "x-icescrum-token: <token>" https://icescrum.cpnv.ch/ws/user/<id>

{
  [...]
  "lastLogin": "2022-08-11T16:42:35Z",               //will be used as last activity date
  [...]
}
  • Disable an account
curl -X PUT -H "x-icescrum-token: <token>" https://icescrum.cpnv.ch/ws/user/<id>/disable
```json
{
      "enabled":false                               //will be used as account state
}
  • Get email and user name
curl -X GET -H "x-icescrum-token: <token>" https://icescrum.cpnv.ch/ws/user/<id>

{
  [...]
  "email": "simon.henry@cpnv.ch",
  "username": "Simon Henry",
  [...]
}
  • Update email and user name
 curl -X PUT \
      -H "x-icescrum-token: 07d83412f1c84051836de7d7d84cff61" "Content-Type: application/json" \
      -d '{"user.username":"simon.henry@eduvaud.ch", "user.email":"simon.henry@eduvaud.ch"}' https://icescrum.cpnv.ch/ws/user/78 \
      | jq



Description: This user story is dedicated to 

### Story User left the School

#### Story Remove the User

---
### Projects

#### Story Archive project

#### Story Delete project

Clone this wiki locally