How to manage local users?

[arm2arm]

Hello,
I can add and activate users using flask reana-admin tool but cannot edit or delete users. How to do that in the local deployments? :
Current 0.8.4 Documentation stating it is not possible:

Usage: flask reana-admin [OPTIONS] COMMAND [ARGS]...

  REANA administration commands.

Options:
  --help  Show this message and exit.

Commands:
  create-admin-user         Create default user.
  quota-resources           List available quota resources.
  quota-set                 Set quota limits to the given users per...
  quota-set-default-limits  Set default quota limits to users that do not...
  quota-usage               List quota usage of users.
  status-report             Get a status report of the REANA system.
  token-grant               Grant a token to the selected user.
  token-revoke              Revoke selected user's token.
  user-create               Create a new user.
  user-export               Export all users in current REANA cluster.
  user-import               Import users from file.
  user-list                 List users according to the search criteria.

thank you beforehand.

[tiborsimko]

Hi @arm2arm, REANA indeed does not allow currently to edit or delete users. The closest you can do right now is to revoke a token from a user using the token-revoke command, which will prevent the user from starting new workflows.

WRT editing, what would be the concrete use case? E.g. amend the email address of the user after changing institutions?

WRT deleting, the full account deletion may be tricky, as you may want to delete also the user workflows' workspaces whilst still keeping some CPU quota usage information for resource accounting (if enabled). So we cannot simply hard-delete some database rows; rather we may want to soft-delete the user by special account status tagging.

We could plan the implementation for some of the above functionality, if interested.

[arm2arm]

Hi @tiborsimko , Thank you for the clarification, actually we did a typo in email for the users, so we wanted to delete or edit them.
Another useful thing will be "impersonation" of the users to understand some issues with the user-workflows.
For the planning will be really useful:

• email edit/delete
• username edit/delete
• user workflows list/delete
• user impersonate on the web, probably as an admin one can impersonate them using token.

[tiborsimko]

Hi @arm2arm Considering that you are planning to use Keycloak, I think we can close this issue. We won't be developing much the local user management options in REANA; it's better to plug a feature-full external AAI system such as Keycloak. Hope this will do!

[arm2arm]

thank you! well done 👏