Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

As a superuser, activating a user fails #927

Closed
oliverroick opened this issue Nov 11, 2016 · 6 comments
Closed

As a superuser, activating a user fails #927

oliverroick opened this issue Nov 11, 2016 · 6 comments

Comments

@oliverroick
Copy link
Member

Steps to reproduce the error

On the development VM, with fixtures loaded:

  1. Login as a superuser (either iross or oroick)
  2. Go to the user view (it's the link in the menu)
  3. Active testuser10.
  4. Logout
  5. Login as testuser10

Actual behavior

The account of testuser10 is still inactive.

Expected behavior

The account of testuser10 is active.

The culprit

organization.views.default.UserActivation sets the field is_active to the correct state; in the example above it is True. testuser10's email verification period has expired; when they try to login, the account will be deactivated immediately.

Should organization.views.default.UserActivation also set email_verified to True (i.e. manually confirming the email address) when activating the account?

@dpalomino
Copy link

Thanks @oliverroick. IMO yes, it should also verify the account...

@seav
Copy link
Contributor

seav commented Nov 14, 2016

Can we actually say that the email is verified if it was never verified? The email could be wrong, for one thing. Maybe activating the user means just resetting the expiration period.

@oliverroick
Copy link
Member Author

I think, @seav is right. The user receives an email to confirm their email address, which will activate the account.

The behaviour described above is correct, I think we can close this.

@amplifi
Copy link
Contributor

amplifi commented Nov 15, 2016

Does this cover the case where the user doesn't have an email address?

@wonderchook
Copy link
Contributor

Not sure that makes sense. We shouldn't be assuming people should be able to get emails. Long term I think the issue is we need to make an Architecture Design Proposal about how we deal with users without email addresses.

@dpalomino
Copy link

Apart from the user without mail address registered (that's being discussed separately), this is now working as expected, so we can close the issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

5 participants