owncloud / owncloud/user_ldap

Feature: LDAP users could be deleted over the User-Settings-Web-UI

Open
#224 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
PHP
Stars
17
Forks
19
Avg merge
11h 40m
Merged PRs (30d)
2

Description

In previous versions ( <=9.1) the LDAP users could be only be managed over the occ command and cron job:

There was a background job that has checked 50 users every 51 minutes and they were marked as remnants, long and tedious process that took some months to detect all users.
After that, the administrator could run over occ command the delete user command to remove those users. The administrator didn't have a quick overview or search for those users.
No LDAP user was able to be removed until it was marked in the DB by modifying the remnant state.

Some users wanted to have a "fresh start" being removed and then clean up all unwanted information.


In ownCloud 10 we introduced the new occ user:sync command that detects all users at once and it can be marked as disabled to keep the information and transfer to other users.

It would be an advantage, that the LDAP users can be removed over the User-Settings-Web-UI because the users can be scrolled or searched as all other users. then the administrator can choose to remove them.

An additional use is when a user asks to be removed to have a clean storage (it's asked frequently), the administrator can remove the LDAP users (files, old-shares, calendar, contact's, etc.) and once he logs in again can have a new clean environment.

As security, to avoid removing users by mistake can be added that the non-disabled users can't be removed.

@hodyroff @pmaier1

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by tracing the User-Settings-Web-UI user listing and the existing occ user:sync and user-deletion flows. Determine how LDAP users are identified and how disabled status is represented. Done means administrators can find and remove eligible LDAP users in the UI while non-disabled users are protected and the associated cleanup behavior is preserved.

Written by the indexing model from the issue text.

Assessment

Tech stack
php
Domain
authentication, backend
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.