Standard user management system

[jerolomb]

to implement

• Password recovery via email
• local admin by organization to add/remove users in the organization

[cedricbonhomme]

I will improve the management of organizations.

But for the password recovery I will find another solution. We do not have email address:
https://github.com/CASES-LU/MOSP/blob/master/src/web/models/user.py#L15
The goal was to be able to have anonymous account, with just a nickname and a password.

But first improving organizations could in a second step solve this issue.

[cedricbonhomme]

An email property has been added to the users. In consequence it is now possible to recover an account. via email. The user has just to provide the login (because emails are not unique on the platform: you can have two accounts with the same email address) of the account to recover, then he will receive an email with a token in an URL.

The email notification system will be used for other things (subscriptions to objects/schemas for example).

Will do soon local admin for organization. Eventually an open registration mechanism with an admin interface to accept/reject requests for joining the community.

[cedricbonhomme]

There is now a mechanism for self-account creation and a password recovery feature.

[cedricbonhomme]

I realized that if we have org admin users and normal users, it is better to block users from updating their email address. Else they can switch their account (we may need to think about this for MONARC...).

[cedricbonhomme]

A solution could be to have a way which will enable to bind a user's email address to a set of domain per organization. Then a normal user or an org admin user would be able to change the email address but not the domain name.

[cedricbonhomme]

This ticket is no more exactly relevant today.
But, the idea of an other type of role, "Org Admin", might still be relevant.

An Org Admin would be a member of an organization able to manage other members of this organization: add or remove members, etc.