17 Commits

Author SHA1 Message Date
dave
47ee73f3e6 Allow existing parents, principals, mentors, and alumni to create mutlirole accounts. 2010-02-10 14:58:10 +00:00
dave
54fe3bf509 Make user_auth_required aceept and array and return the auth user type.
If the user is required to login before visiting a page, remember the
page, and take them to it once they login.
2010-01-24 06:47:06 +00:00
james
0854c50f4e Allow to logout even if the session has already timed out 2009-11-30 20:15:00 +00:00
james
37bbcf312b - Name the science fair login "Science Fair" not "Other Fair"
- Since science fairs are attached to users now, it doesn't make sense to allow
  the user to choose from a list of fairs, since there could be more than one
  with access to a fair (and we don't want to start putting names in there), so 
  fairs can login with a user/pass like everyone else.
2009-11-06 02:07:52 +00:00
james
f963dbf276 Merge all changes from branch r1284:1498 into trunk 2009-09-09 00:26:12 +00:00
dave
a9318b6303 - Move all the password handling code into one function (not duplicated/spread
over 3 files)
- Fix a bug to always save the old password (unless it was a reset password)
- Fix a bug to save the old password even when the user sets a new one
2008-07-09 17:02:11 +00:00
dave
7f7c3c53e1 - Change the password expiry mechanism to always check
{$type}_password_expiry_days.  This allows the $config variable to be updated
  and everyones password will expire based on the new value.  To implement
  this, the password expiry column in the users table has been changed to
  passwordset, and a PHP script is used to convert the expiry dates to set
  dates (based on the _password_expiry_days)
- Cleanup the password entry checking
- Load all config variables for the db_update.php script.  Just in case an
  update script wants access to $config
2007-12-21 08:38:13 +00:00
dave
a420a18143 - Skip some session variables on logout, clear everything else. 2007-12-21 01:16:30 +00:00
dave
9fffa6755d - Call them 'fair's not 'region's.. to assist linking fairs together.
- This patch references some config variables that don't exist yet, that's ok,
  we dont' want anyone turning these on yet.
2007-12-12 04:15:17 +00:00
dave
1dc1b47d05 - Fix multirole creation. If a user tries to create an account, and they
already exist, they will be guided through the process of adding a role to
  their existing account.
- Do a database update, and merge anyone who has managed to create 2 accounts
  into a single account.
- Still testing this, but it seems to be working
2007-12-12 03:01:44 +00:00
james
08f5d64179 Fix the login so it authenticates on the right record -- there is probably other stuff wrong if this is happening, but this is the easiest fix for now. There should never be two records in the users table with the same username/emailaddress, it should use the multi-role stuff... but this change will also work with multi-role anyways once the cause of this is fixed (registering as a volunteer when you're already a committee member creates a new record in the users table, instead of attaching you to the old one). 2007-12-11 19:13:11 +00:00
james
93011c9883 Cannot check for valid password when authenticating, because people might have passwords that dont match the "new" requirements
Also simplify some of the code (why bother assigning temp vars just to compare?)
2007-11-19 21:28:15 +00:00
dave
82b957eee4 - Fix a bug in multirole 2007-11-19 17:11:47 +00:00
dave
2715d67aef - Fix login check for an expired password
- Allow user_personal.php to handle committee members
- Add password field if the editer in user_personal has access_super
- Allow a committee member to edit anyone in user_personal.php
- Convert auth_required to user_auth_required, and check for both a user type
  and an access level (if committee)
- Convert the committee to the new user system (BIG change :)
- Remove the ^M from admin/committees.php
2007-11-17 21:59:59 +00:00
dave
6b8f25c7b8 - Quick hack, disable all the user_login.php login types, except volunteer,
until we move over the otehr types
2007-11-16 08:02:47 +00:00
dave
9a98fb8da8 - Don't let the user see the login page if they're already login, instead,
provide them with a message indicating how to logout.
2007-11-16 08:00:40 +00:00
dave
93c05cbe2f - New user and volunteer signup system 2007-11-16 06:30:42 +00:00