Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Installer helper - force username and password change for admin users on migrate command #3761

Open
rowasc opened this issue Sep 13, 2019 · 0 comments

Comments

@rowasc
Copy link
Contributor

commented Sep 13, 2019

Which user group(s) are the primary audience for this feature/enhancement.
OSS deployers

Is your feature request related to a problem? Please describe.
Yes. When you create a new deployment through an OSS installation the default password is administrator and the user is admin by default. While that is fine as long as you change it before making the system public, in reality users are not always going to do it quickly, and also, it's hard to change them without making the client and API available (ie there is no obvious way to do it outside of the frontend)
This also causes problems in that users may decide to keep an unsafe default password and username by bypassing UI prompts in some way.

Describe the solution you'd like
I would like to add a prompt after the initial database migrations are run that ask the user to change their administrator password and email. If the user skips it, they will see the frontend warning, maybe like the one that Anna is developing here ushahidi/platform-client#1335 but this provides a quick and obvious prompt to change it, which should help solve this issue. It will also be available as a CLI for user 1 (admin) forever as a way to reset access to the system from the terminal (ie similar to what the drupal CLI does with user 0)

Describe alternatives you've considered
Doing it in the Gulp CLI when you first build the frontend, which may be an option but I feel it's more natural to do it in the backend when you install the platform API.

Additional context
We like nice tools and want to make nicer tools for our users.

@rowasc rowasc added the Installation label Sep 13, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
1 participant
You can’t perform that action at this time.