Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adding a user to the platform should send that user an email with a link to reset their password #1421

Closed
jshorland opened this issue Oct 4, 2016 · 6 comments

Comments

@jshorland
Copy link

jshorland commented Oct 4, 2016

Expected behaviour

When I add a user to my deployment, that user has no idea they've been added unless I tell them and give them their dummy password I assigned to them.

Actual behaviour

An email sends to them with a link to reset their password and then login to the deployment.

Steps to reproduce the behaviour/error

Add user
do nothing.

Aha! Link: https://ushahiditeam.aha.io/features/PROD-661

@jshorland
Copy link
Author

Need to scope new flow for this.

@jshorland
Copy link
Author

As we see more and more orgs coming onto the platform, this is significantly increasing in priority. We MUST get this done soon.

@jshorland
Copy link
Author

Additionally from previous issues #290:

  • Users were surprised that there was no step requiring email confirmation during sign up, and were concerned that anyone could use their email address to create an account.
  • I would argue that the user should receive an email and approve a sign up token from it before authorize to access.

@jshorland jshorland removed the Q2 OKR label Aug 29, 2017
@jshorland
Copy link
Author

jshorland commented Aug 29, 2017

User stories:

  • as an admin creating my first deployment, I want to receive a confirmation email as a security measure with a link that automatically logs me in when I click it.
  • as a user with the permission to manage users, I want any new user I create to receive an email invitation/confirmation to the deployment with a link to login
  • as someone who has "signed up" for a deployment as a member, I want to receive a confirmation email as a security measure with a link that automatically logs me in when I click it
  • as someone who has been signed up for a deployment by an admin as any type of user, I want to receive a confirmation email as a security measure with a link that automatically logs me in when I click it
  • as a user of a deployment, I want to receive an email notification whenever something in my user account changes/is updated with a link to report it as suspicious (user role, user name, password, contact email, contact phone, notification settings)

@webong
Copy link
Contributor

webong commented Mar 25, 2020

Hello @tuxpiper @rowasc @Angamanga ... since I have been able to achieve this #3110 ... was thinking I could also work on this.

@rowasc
Copy link
Contributor

rowasc commented Mar 25, 2020

That'd be fantastic. Also thank you so much, #3110 is a life saver <3

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

7 participants