[Loris-dev] Granular and time expiring permissions on LORIS.

[Rolando Acosta]

Hi Rida,

Thank you very much for the complete and quick answer. The insights you
provide us are very valuable and will help us to speed up the development.

We'll try to do the customization in a reusable way. Eager to modestly
contribute with the useful product you are developing and that so much has
helped in our effort at the CHU Sainte-Justine.

Thanks again, we'll be in touch in case questions/issues arrives during
implementation,
Rolando Acosta (CHU Sainte-Justine)


On Thu, May 31, 2018 at 5:16 PM, Rida Abou-Haidar <rida.loris at gmail.com>
wrote:

> Hi Rolando,
>
> No this functionality does not currently exist in LORIS, you are the first
> project asking for it from what I can tell.
>
> If I was to implement this feature, I would do it the following way:
> - add 2 columns to the users table in the database (`active_from` DATE,
> `active_to` DATE)
> - modify the edit_user form (link https://github.com/aces/Loris/
> blob/minor/modules/user_accounts/php/edit_user.class.inc) to add 2 new
> fields
>     - copy the entire module (user_accounts) into your project/modules/
> directory
>     - the _process(), _validateEditUser() and setup() functions will need
> to be modified to add the 2 new fields ('Active Date From', 'Active date
> To')
>     - modify the template file for edit user (link
> https://github.com/aces/Loris/blob/minor/modules/user_
> accounts/templates/form_edit_user.tpl)
> - copy the php/libraries/SinglePointLogin.class.inc into the
> project/libraries/ directory and add a check to verify the date of activity
> and change the `users`.`active` database field from 'Y' to 'N' if the login
> attempt is at a date later then `active_to`. This needs to be added at the
> right line, before the check for the users active flag (link:
> https://github.com/aces/Loris/blob/minor/php/libraries/
> SinglePointLogin.class.inc#L316). If done correctly the activity check
> will fail if the date is passed.
>
> At this point with the additions above the system should automatically
> check the authorized dates, and update the users.active field to represent
> if a user is authorized or not to access. LORIS's current infrastructure
> already checks for that flag before allowing login. Note that all/any field
> names can be named to your liking I just suggested the ones above as
> examples.
>
> If this is implemented correctly (in a non-hacky way) it is welcome to be
> submitted as a PR to our repo which might be merged into a future release
> and that would spare you overrides later on (overrides being the module and
> library file that were moved into the project directory).
>
> Best of luck and let us know if you need more details,
> Rida Abou-Haidar
> CCNA Software Developer
> Montreal Neurological Institute
> McGill University
> rida.loris at gmail.com
>
> On Wed, May 30, 2018 at 10:04 AM Rolando Acosta <rolando.acosta at cnbp.ca>
> wrote:
>
>> Good morning loris-dev,
>>
>> For the project we are working on CHU Sainte-Justine we realize we will
>> need to set (for a given user) access to the system but only for a given
>> time window.
>>
>> We have identify that there is an option to make an user active or
>> inactive checking a Box on the user's permission config.
>>
>> What we are wondering is if there are an easy way for a "DataCenter
>> manager"... let call it this way... to (at the time of creating a user or
>> later on) set for example that it will be only active from May 30 2018 to
>> June 20 2018?
>>
>> I know its a very specific requiriment of our project but if you have
>> already implemented this functionality or can give us any insight of how to
>> do it will be great.
>>
>> Thank you very much,
>> Rolando Acosta (CHU Sainte-Justine)
>> _______________________________________________
>> Loris-dev mailing list
>> Loris-dev at bic.mni.mcgill.ca
>> http://www.bic.mni.mcgill.ca/mailman/listinfo/loris-dev
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.bic.mni.mcgill.ca/pipermail/loris-dev/attachments/20180604/6e158ac8/attachment.html>