standard user management system

[jerolomb]

to implement

• Password recovery via email
• local admin by organization to add/remove users in the organization

[cedricbonhomme]

I will improve the management of organizations.

But for the password recovery I will find another solution. We do not have email address:
https://github.com/CASES-LU/MOSP/blob/master/src/web/models/user.py#L15
The goal was to be able to have anonymous account, with just a nickname and a password.

But first improving organizations could in a second step solve this issue.

[cedricbonhomme]

An email property has been added to the users. In consequence it now possible to recover an account. via email. The user has just to provide the login (because emails are not unique on the platform: you can have two accounts with the same email address) of the account to recover, then he will receive an email with a token in an URL.

The email notification system will be used for other things (subscriptions to objects/schemas for example).

Will do soon local admin for organization. Eventually an open registration mechanism with an admin interface to accept/reject requests for joining the community.

[cedricbonhomme]

I realized that if we have org admin users and normal users, it is better to block users from updating their email address. Else they can switch their account (we may need to thing about this for MONARC...).