Page MenuHomePhorge
Create Task
Maniphest T15490

Uninstalling/Installing an application should eventually involve MFA
Open, Needs TriagePublic
Actions

Description

Steps to reproduce:

  • be sure to have MFA enabled for your user
  • try to disable the Dashboard application (/applications/view/PhabricatorDashboardApplication/) or whatever other app

At this point, the MFA should be asked. At the moment it's not.

One case where MFA is asked is when empowering a user.

Revisions and Commits

rP Phorge
Needs RevisionD25935 Require MFA to uninstall apps if enabled

Related Objects

Event Timeline

valerio.bozzolan created this task.Jun 22 2023, 15:13
Herald added subscribers: Cigaryno, Matthew, chris and 2 others. · View Herald TranscriptJun 22 2023, 15:13
valerio.bozzolan moved this task from Backlog to Code Sprint Candidate on the User-valerio.bozzolan board.Jun 22 2023, 15:13
pasik subscribed.Tue, Mar 25, 11:31
Herald added a subscriber: revi. · View Herald TranscriptTue, Mar 25, 11:31
Cigaryno updated the task description. (Show Details)Tue, Mar 25, 14:03
Cigaryno added a revision: D25935: Require MFA to uninstall apps if enabled.Sat, Mar 29, 16:40
Cigaryno claimed this task.Sat, Mar 29, 16:52

I don't know if what I done on D25935 is correct, but as usual, Request Changes if I did it wrong.
I relied on the code on PhabricatorUserEmpowerTransaction to try to make PhabricatorApplicationUninstallTransaction require MFA if enabled.

Content licensed under Creative Commons Attribution-ShareAlike 4.0 (CC-BY-SA) unless otherwise noted; code licensed under Apache 2.0 or other open source licenses. · CC BY-SA 4.0 · Apache 2.0