Disabled User - GateIn Portal 3.7

Since GateIn 3.7 administrator can temporarily revoke access of a particular user account and mark it as disabled.

Behaviors

User marked as "disabled" cannot authenticate into portal. Attempt to reset the credentials of a disabled user will fail.

Additionally such users won't be listed in many places in the UI - like in user select forms related to security. Those will still appear in the organization management portlet. Administrator can filter and list enabled and disabled users only.

Backwards compatibility

Introducing this feature required storing additional information about user - "enabled" attribute. When migrating from previous GateIn versions this attribute won't be set. Dedicated script is provided that help to migrate the legacy data. Please refer to instructions here

This feature can also be turned off by using "filterDisabledUsersInQueries" configuration switch. It is available in idm-configuration.xml file that can be located in the following path: gatein.ear/portal.war/WEB-INF/conf/organization/idm-configuration.xml

          <!--
            When this option is set to true:
              If use fresh user-database or existed user-database of GateIn 3.7 or above, it will work fine with disable-user feature.
              If use existed user-database of GateIn 3.6 or below, Some method introduced by disable-user feature will not
              return existed-user because it is impossible to select user has not an attribute by query with PLIDM,
              so you need to migrate data before use disable-user feature.
            When this option is set to false:
              All method return collection user of UserHandler interface will ignore param 'enabledOnly'.
              They will always return both enable and disabled user

            If you setup a fresh user-database or use existed user-database of GateIn 3.7 or above,
            it's recommended to switch this option to true to use disable-user feature
            If you has existed user-database of Gatein 3.6 or below, it's recommended to migrate data and set this option to true to use disable-user
            feature or set this option to false.
          -->
          <field name="filterDisabledUsersInQueries">
            <boolean>true</boolean>
          </field>

When this option is set to false, the query for a list of user always return BOTH enabled and disabled users. By default, it is configured as true