Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

create validation to stop admins from being locked out of their account #1848

Conversation

iram-shehzadi
Copy link
Contributor

What

Introduce enhancements to the administrator management process. The changes include allowing modifications to administrators only if there are two or more administrators present within an organisation. It also incorporates the addition of confirmations, reminders, and error summaries to provide a more secure and reliable experience.

Why

The objective of these enhancements is to address the following goals:

Security: By requiring a minimum of two administrators, we ensure that organisations are not left without an admin in case of any unforeseen circumstances, such as one admin leaving or getting locked out of their account.

Reliability: By incorporating confirmations, reminders, and error summaries, we improve the user experience and help administrators make informed decisions while managing the administrator accounts. This reduces the risk of errors and improves the overall reliability of the system.

By implementing these improvements, we aim to create a more robust and user-friendly environment for administrators and organisations. The changes will enhance the overall security posture and operational continuity, reducing the likelihood of account lockouts and ensuring organisations have appropriate contacts for support.

Link to Jira card (if applicable):
https://technologyprogramme.atlassian.net/browse/GW-624

@koetsier koetsier force-pushed the GW-624-Prevent-admins-from-removing-another-admin-if-it-leaves-only-1-admin branch from 15ecb34 to d3b7e0c Compare June 14, 2023 12:41
@iram-shehzadi iram-shehzadi force-pushed the GW-624-Prevent-admins-from-removing-another-admin-if-it-leaves-only-1-admin branch from d3b7e0c to 731cb37 Compare June 14, 2023 12:57
koetsier

This comment was marked as resolved.

@iram-shehzadi iram-shehzadi force-pushed the GW-624-Prevent-admins-from-removing-another-admin-if-it-leaves-only-1-admin branch from 6159313 to 86845ab Compare June 15, 2023 22:04
<p class="govuk-body govuk-!-margin-bottom-4"> <%= @membership.user.email %> </p>

<%= render "memberships/minimum_two_administrators_required" %>

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Maybe confirm could be called something more descriptive to distinguish it from confirming removing a user?

app/views/memberships/edit.html.erb Show resolved Hide resolved
@iram-shehzadi iram-shehzadi force-pushed the GW-624-Prevent-admins-from-removing-another-admin-if-it-leaves-only-1-admin branch from ce387bb to b6eb3c5 Compare June 30, 2023 11:11
@koetsier koetsier force-pushed the GW-624-Prevent-admins-from-removing-another-admin-if-it-leaves-only-1-admin branch from b6eb3c5 to 810cb0f Compare July 4, 2023 11:48
…min for the organisation

changes made after review

missed an end

changes
@iram-shehzadi iram-shehzadi force-pushed the GW-624-Prevent-admins-from-removing-another-admin-if-it-leaves-only-1-admin branch from 810cb0f to 324837d Compare July 8, 2023 10:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants