Project

General

Profile

Task #629

List of users needs cleanup

Added by Szilárd Páll over 8 years ago. Updated about 1 year ago.

Status:
In Progress
Priority:
Normal
Category:
Redmine
Target version:
-
Close

Description

The list of users contains quite many obscure items with no name and some of the users have acquired the "empty" last name. We should clean up this list. Moreover, the current default password is quite insecure and opens up the door for spammers.

I suggest that we change the passwords to something way less obvious and send warning mails to all users to log in and change their passwords and update their profiles.

History

#1 Updated by Teemu Murtola over 8 years ago

It also appears that some people have more than one account; it would be good to clean up those as well. Now, e.g., the "Assigned to" dropdown list can show the same person more than once, making it a bit tricky to know which one is in active use.

#2 Updated by Rossen Apostolov over 6 years ago

Clearing users: we can remove everyone who hasn't logged in since we moved to redmine. They can always register again if needed.

Double accounts: I fixed a few of those long time ago, what else is left?

#3 Updated by Rossen Apostolov over 6 years ago

Any objection to remove those who haven't logged in at all?

#4 Updated by Szilárd Páll over 6 years ago

  • Category set to Redmine

Rossen Apostolov wrote:

Any objection to remove those who haven't logged in at all?

I don't see any issues with that except that we don't want to remove anyone with data tied to their user in the database (most importantly issues).

Looking back in the history it seems that most reports imported from Bugzilla have the user data correctly retained, but there are some exceptions (e.g Erik's old bugs seem to not be correctly associated to his current account which IMO is a bug - although not critical one). Therefore, one can not assume that any user that has never signed in into Redmine will not have relevant data associated to his/her account.

#5 Updated by Rossen Apostolov over 6 years ago

Maybe redmine warns if account has had activity before deletion but I'm not sure. Also, it's possible to only lock accounts without deletion.

Is there something else to be done or close it?

#6 Updated by Szilárd Páll over 6 years ago

As with other issues in redmine, until the inactive accounts with no linked information get removed, the status should be set to "In progress" and closing should happen when the issue is really solved. ATM I still see hundreds of users with empty "last connection" field.

#7 Updated by Rossen Apostolov about 6 years ago

  • Status changed from New to In Progress
  • Assignee set to Rossen Apostolov

Deleting a user preserves his activity but as "anonymous". So I suggest we remove all that never logged in since we moved to redmine.

#8 Updated by Szilárd Páll almost 2 years ago

WHat's the status of this issue?

Also available in: Atom PDF