Feature: LDAP users could be deleted over the User-Settings-Web-UI
Nobody has claimed this yet.
- Dominant language
- PHP
- Stars
- 17
- Forks
- 19
- Avg merge
- 11h 40m
- Merged PRs (30d)
- 2
Description
In previous versions ( <=9.1) the LDAP users could be only be managed over the occ command and cron job:
There was a background job that has checked 50 users every 51 minutes and they were marked as remnants, long and tedious process that took some months to detect all users.
After that, the administrator could run over occ command the delete user command to remove those users. The administrator didn't have a quick overview or search for those users.
No LDAP user was able to be removed until it was marked in the DB by modifying the remnant state.
Some users wanted to have a "fresh start" being removed and then clean up all unwanted information.
In ownCloud 10 we introduced the new occ user:sync command that detects all users at once and it can be marked as disabled to keep the information and transfer to other users.
It would be an advantage, that the LDAP users can be removed over the User-Settings-Web-UI because the users can be scrolled or searched as all other users. then the administrator can choose to remove them.
An additional use is when a user asks to be removed to have a clean storage (it's asked frequently), the administrator can remove the LDAP users (files, old-shares, calendar, contact's, etc.) and once he logs in again can have a new clean environment.
As security, to avoid removing users by mistake can be added that the non-disabled users can't be removed.
@hodyroff @pmaier1
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by tracing the User-Settings-Web-UI user listing and the existing occ user:sync and user-deletion flows. Determine how LDAP users are identified and how disabled status is represented. Done means administrators can find and remove eligible LDAP users in the UI while non-disabled users are protected and the associated cleanup behavior is preserved.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- authentication, backend
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100