1
0
Fork 0
mirror of https://we.phorge.it/source/phorge.git synced 2024-12-18 19:40:55 +01:00
phorge-phorge/src/applications/config
epriestley d6d3ad6f80 Allow administrators to get a list of users who don't have MFA configured
Summary:
Fixes T12400. Adds a "Has MFA" filter to People so you can figure out who you need to harass before turning on "require MFA".

When you run this as a non-admin, you don't currently actually hit the exception: the query just doesn't work. I think this is probably okay, but if we add more of these it might be better to make the "this didn't work" more explicit since it could be confusing in some weird edge cases (like, an administrator sending a non-administrator a link which they expect will show the non-administrator some interesting query results, but they actually just get no constraint). The exception is more of a fail-safe in case we make application changes in the future and don't remember this weird special case.

Test Plan:
  - As an administrator and non-administrator, used People and Conduit to query MFA, no-MFA, and don't-care-about-MFA. These queries worked for an admin and didn't work for a non-admin.
  - Viewed the list as an administrator, saw MFA users annotated.
  - Viewed config help, clicked link as an admin, ended up in the right place.

{F4093033}

{F4093034}

Reviewers: chad

Reviewed By: chad

Maniphest Tasks: T12400

Differential Revision: https://secure.phabricator.com/D17500
2017-03-15 17:49:01 -07:00
..
application Update SchemaQuery and the web UI to accommodate multiple master databases 2016-11-12 16:36:52 -08:00
check Be less strict when detecting dead daemons 2017-02-22 14:11:28 -08:00
constants Redesign Config Application 2016-08-29 15:49:49 -07:00
controller Fix errors found by PHPStan 2017-02-17 10:10:15 +00:00
custom Make new logo and wordmark more reasonably configurable by human users 2016-08-07 12:00:21 -07:00
editor Allow bin/config to affect database configuration and migrate between local and database configuration 2014-10-08 16:15:05 -07:00
engine When we "discover" new fatal setup issues, stop serving traffic 2016-11-21 15:54:40 -08:00
exception Apply some autofix linter rules 2014-09-10 06:55:05 +10:00
issue Clean up another insufficiently-general exception 2016-11-23 10:41:19 -08:00
json Improve UI formatting of some configuration values 2015-12-05 09:58:47 -08:00
management Add a "--force" argument to "bin/config done" 2016-12-01 13:53:33 -08:00
module Split setup checks into "preflight" and "normal" checks 2016-09-06 11:57:18 -07:00
option Allow administrators to get a list of users who don't have MFA configured 2017-03-15 17:49:01 -07:00
phid Mark PhabricatorPHIDType::getPHIDTypeApplicationClass() as abstract 2015-11-03 06:47:12 +11:00
query Make buildWhereClause() a method of AphrontCursorPagedPolicyAwareQuery 2015-04-20 10:06:09 -07:00
response Add a friendlier "in flight" error page 2016-09-07 06:59:48 -07:00
schema Fix errors found by PHPStan 2017-02-17 10:10:15 +00:00
storage Add "Manual Activities", to tell administrators to rebuild the search index 2016-11-30 11:23:54 -08:00
view Run all minor setup checks on all configured database hosts 2016-11-21 15:55:54 -08:00