[
http://mifosforge.jira.com/browse/MIFOS-2766?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=57006#action_57006
]
Van Mittal-Henkle commented on MIFOS-2766:
------------------------------------------
I completely agree with this complaint.
As I have been thinking about how we could restructure Mifos an idea that keeps
coming up for me is having a concept of a Mifos "user" that is separate from
the current concept of "personnel". A user has a login and password, but
personnel doesn't. You would then be able to link a user to a personnel if you
chose to but it wouldn't be required. So you could have an entry for a loan
officer (personnel) with no corresponding user account or a user (say a sys
admin) with no corresponding personnel entry. This would also set us up to be
more modular on the back end.
If we go ahead with the Grails reimplementation of the UI, I would hope to
implement this distinction if it makes sense to everyone.
> Allow creation of loan officers that cannot login to system
> -----------------------------------------------------------
>
> Key: MIFOS-2766
> URL: http://mifosforge.jira.com/browse/MIFOS-2766
> Project: mifos
> Issue Type: Improvement
> Affects Versions: Release 1.4.2
> Reporter: Ryan Whitney
>
> Currently within Mifos, you need to create an user account for every single
> Loan officer even if that user is not supposed to have access to the system
> (pretty common with a lot of MFIs).
> This unfortunately means you have somewhat of a security risk, as even if you
> obfuscate every password, it means that someone can log in to that account.
> SEtting the account to inactive will not work as you cannot then assign
> centers to the loan officer.
> Need to add a third status for the user accounts - OR - add a flag that turns
> off the ability to login.
> Adding a flag would be the preferred method as you could
> 1. Turn off the password requirement when creating the account (saving time
> during hte onerous process of creating accounts for every loan officer in a
> large org at the beginning of a deployment)
> 1.1 - Adding in the ability to login would then require the user to enter
> in a password before being able to submit.
> 2. Turn accounts on and off temporarily (may also open up the ability to
> create time limited accounts, which has been requested before)
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://mifosforge.jira.com/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
------------------------------------------------------------------------------
Download Intel® Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
Mifos-issues mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mifos-issues
