parse-community / parse-community/parse-dashboard
Account lockout should be editable in dashboard
Nobody has claimed this yet.
- Dominant language
- JavaScript
- Stars
- 3.8k
- Forks
- 1.4k
- PR merge metrics
- No merged PRs in 30d
Description
Issue
When a user account is locked due to wrong password entered too many times, it cannot easily be unlocked. Customer support may want to unlock the account manually prior to the expiration date, for example upon customer request.
Unlock is currently only possible via edit directly in the database, which is not a practicable.
Suggested solution
The field _account_lockout_expires_at should be exposed in the dashboard to be manually deleted. Once the field value is deleted, the value for _failed_login_count becomes irrelevant and may as well continue to exist until it gets updated upon the next failed login attempt.
Alternative solutions
Add a design feature in the dashboard that indicates that a user is locked out and allow to unlock the user with the click of a button. -> more work to implement but provides the same functionality, so maybe a later PR.
Environment Setup
- parse dashboard 2.0.4
Logs/Trace
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the dashboard user-account editing view and how it exposes account fields. Check how _account_lockout_expires_at is represented and edited, then verify that deleting its value allows a locked account to be unlocked without requiring a direct database edit.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- frontend
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100