Feature #8208
closedAllowing user accounts without password and disallowing login
0%
Description
Upon user account creation, the user password is mandatory.
I would like to display users, but prohibit login. Thus user account locking is not a solution here.
One workaround is to set a complex random password and avoid sending it to the user.
Is it feasible to add a checkbox (say under the password input field) to bypass the password length test, and as a result get a (somewhat) regular account unable to login ?
Updated by Etienne Massip over 13 years ago
- Category set to Accounts / authentication
I don't see such a change to be integrated into Redmine one day, what do you mean by "display users" ?
Updated by Laurent Gautrot over 13 years ago
"display users" means I would like them to appear as regular users. But I don't want them to be able to login.
In fact, I don't want to bother with password generation, and I wouldn't provide users with trivial password, especially at setup time when I might bulk-create dozens of accounts.
The behaviour I'd like to have is somewhat the same as account expiration or password expiration in UNIX systems.
I guess it would be easy to set the password to NULL, and as a result, user accounts would still exist but would remain unusable until a password change/reset by an admin.
Updated by Etienne Massip over 13 years ago
Laurent Gautrot wrote:
"display users" means I would like them to appear as regular users. But I don't want them to be able to login.
What for ?
Updated by Laurent Gautrot over 13 years ago
At first, I want users to appear because they are related to at least one project. If I need to get info at a glance about a project, I would like to see the list of users and their role.
Only when needed, I would setup their password and allow connection.
Updated by Dmitry Babenko over 13 years ago
Laurent Gautrot wrote:
At first, I want users to appear because they are related to at least one project. If I need to get info at a glance about a project, I would like to see the list of users and their role.
May be it would be enough for you to list that users in project description or create a custom field called "Users" for the project. And create accounts only when they really needed.
Updated by Go MAEDA 9 months ago
- Resolution set to Wont fix
Please set a random password for users.
Laurent Gautrot wrote in #note-2:
In fact, I don't want to bother with password generation, and I wouldn't provide users with trivial password, especially at setup time when I might bulk-create dozens of accounts.
You can easily set a random password by checking "Generate password" checkbox when you create a new user.