Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-144379

As a System Admin, I can disable any type of login to Liferay

Details

    Description

      Motivation:

      Certain operations such as backup generation previous to an upgrade or migration require "freezing" the content to ensure data are not lost. Currently, the alternatives are:

      Shutting down the system: this makes new data generation impossible, but makes the sites completely unavailable.
      Disabling login (e.g. through ENV variable LIFERAY_AUTH_PERIOD_LOGIN_PERIOD_DISABLED=true or its equivalent portal property): this prevents access from regular login, but login via SAML or content creation via API is still possible.

      See PTR-2279 for further discussion.

      Acceptance Criteria:

      • Given the LIFERAY_AUTH_PERIOD_LOGIN_PERIOD_DISABLED (or its corresponding portal property) is set to true, then:
        • login via UI is disabled (current behavior)
        • authenticated API operations are disabled (new behavior). 
        • login via SSO (e.g., with SAML) is disabled (new behavior)

      Attachments

        Issue Links

          Activity

            People

              team-user-and-system-mngt Product Team User and System Mngt
              eduardo.garcia Eduardo García (Inactive)
              Zoltan Takacs Zoltan Takacs
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:

                Packages

                  Version Package