b410a7fea9
- permissions (the four Winter codes and manage_privileged_groups), the user navigation item and the embedded admin YAML - Users controller: list with deactivated users, row states, the groups, created date and activated filters, and the form's name, surname and email - a member of a group in golem15.user.privileged_groups (default admin) keeps their email, password and row unless the administrator holds golem15.users.manage_privileged_groups; the refusal is a 403 that saves nothing
27 lines
472 B
YAML
27 lines
472 B
YAML
jwt:
|
|
secret: ""
|
|
ttl: 60
|
|
refresh_ttl: 20160
|
|
blacklist_grace: 0
|
|
leeway: 0
|
|
blacklist_sweep_interval: 10m
|
|
activation:
|
|
require_activation: true
|
|
activate_mode: auto
|
|
reset_ttl_minutes: 60
|
|
activation_ttl_hours: 72
|
|
registration:
|
|
allow_registration: true
|
|
use_register_throttle: true
|
|
throttle:
|
|
attempt_limit: 5
|
|
suspension_minutes: 15
|
|
use_throttle: true
|
|
password:
|
|
bcrypt_cost: 10
|
|
min_length: 8
|
|
api_tokens:
|
|
prefix: usr_
|
|
privileged_groups:
|
|
- admin
|