Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

allow first user to create a superuser account #55

Closed
amberrignell opened this issue Mar 31, 2022 · 1 comment
Closed

allow first user to create a superuser account #55

amberrignell opened this issue Mar 31, 2022 · 1 comment
Assignees
Labels
security Security or compliance related issues
Milestone

Comments

@amberrignell
Copy link
Contributor

amberrignell commented Mar 31, 2022

When the app boots and there are no users in the users table
present them with a setup page requiring password and confirm password.
Then create a superuser, and log them in (don’t prompt for password).

All user accessible routes (i.e. not webhooks) should have a plug added to the pipeline to perform this check and redirect to a 'First Setup' view.

While not explicitly included in this, the consideration for caching should be made.
This can be solved by a process that is added to the process tree on startup which checks the database and stores the result in memory - and the plug that checks if the first setup flow should be rendered will get it's answer from that.

However we solve this, there should be a function exposed from a Lightning.Instance namespace (i.e. Instance.has_superuser?/1)

@amberrignell
Copy link
Contributor Author

Hey team! Please add your planning poker estimate with ZenHub @stuartc @elias-ba

@taylordowns2000 taylordowns2000 added the security Security or compliance related issues label Apr 1, 2022
@taylordowns2000 taylordowns2000 added this to the Sprint 2 milestone Apr 1, 2022
@stuartc stuartc self-assigned this Apr 6, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security Security or compliance related issues
Projects
No open projects
Status: Done
Development

No branches or pull requests

3 participants