Experiencing a 401 Unauthorized Error During Update?

If you're seeing a 401 Unauthorized error when trying to update your Joomla extension, it's likely due to our new two-factor authentication (2FA) security measure for your Download ID.
To resolve this, check your email (Spam folder?) for a message to approve your server or device, or read our detailed blog post here( onlinecommunityhub.nl/best-practice/new-...-extension-downloads) to understand the steps involved. This will guide you through approving your server for future updates.

Implemented Question on New User Notification

  • Norsk Jernbaneklubb
  • Topic Author
  • Offline
More
2 years 6 months ago - 2 years 6 months ago #2022 by Norsk Jernbaneklubb
Question on New User Notification was created by Norsk Jernbaneklubb
The notifications are sent to Site administrator(s). This obviously means all Super Users, and I assume also blocked / disabled Super Users?
Well, disabled users or not, we would like the possibility to say explicitly which admin email addresses that will receive these notifications, like we can in other extensions, e.g. Admin Tools and LOGman.

Would this be a possible enhancement?

Regards,
Frode

DOWNLOADLINK TESTVERSION
This message contains confidential information
Last edit: 2 years 6 months ago by Ruud van Lent. Reason: added link to test version

Please Log in to join the conversation.

More
2 years 6 months ago #2023 by Ruud van Lent
Replied by Ruud van Lent on topic Question on New User Notification
Hi Frode,
the notifications are sent to all user accounts that have 'receive system emails = yes' configured in their account.
This because I classified this as a system email.
I know that this system email functionality is build in into Joomla but almost no extension makes (correct) use of it.

It is also sending to disabled users, this is actually a bug :) Thanks for pointing that out to me :)

The way it is set now, the (super users) can configure themselves if they want to receive these emails or not (they just need to configure the receive system emails in their account).

Would that be an option for you and your administrators?

Please Log in to join the conversation.

  • Norsk Jernbaneklubb
  • Topic Author
  • Offline
More
2 years 6 months ago #2024 by Norsk Jernbaneklubb
Replied by Norsk Jernbaneklubb on topic Question on New User Notification
Hi Ruud

Ok, that's interesting. I've always wondered as to whether that  function was being used at all. But this actually means that anyone with 'receive system emails = yes' will get the mails, even if they're not Super Users (well of course that shouldn't happen, so it's more of a theoretical problem).

But I think we still preferr the explicit email option to have full control, but this will definetly do for the time being. Please explain the system email details in the docs.

Oh, and I forgot to mention the bug I found. You are using html-code in the email Subject line, which comes out like this:
Password for <strong>'User Name'</strong> changed on 'Site Name'

Please Log in to join the conversation.

More
2 years 6 months ago #2025 by Ruud van Lent
Replied by Ruud van Lent on topic Question on New User Notification
Hi Frode,

will push out a new release today that will fix the mailing of blocked uses and also the language string.
This release will also have a new feature: it now has a 'allow from' field for the back-end administrator protection. here you can set e.g. your ip address. When matched you will not be prompted for the apache login, when not matched you will :)

I will add an option for setting a specific (one or more) email accounts (bcc). This will not be part of the next release.

Please Log in to join the conversation.

  • Norsk Jernbaneklubb
  • Topic Author
  • Offline
More
2 years 6 months ago #2026 by Norsk Jernbaneklubb
Replied by Norsk Jernbaneklubb on topic Question on New User Notification
Hi Ruud

Ok thanks, that will be great. However I do have one more report for you, so you might want to "hold your horses" as they say. Coming up in a moment... 

Please Log in to join the conversation.

More
2 years 6 months ago #2027 by Ruud van Lent
Replied by Ruud van Lent on topic Question on New User Notification
I'm holding the horses :)

Please Log in to join the conversation.

More
2 years 6 months ago #2030 by Ruud van Lent
Replied by Ruud van Lent on topic Question on New User Notification
Horses released :)

Please Log in to join the conversation.

More
2 years 6 months ago #2032 by Ruud van Lent
Replied by Ruud van Lent on topic Question on New User Notification
Hi Frode,

in the first post (yours) of this topic there is a link to a test version.
In this version I have refactored the admin accounts email selection.

Now there is a (advanced tab) field where you can specify one or more admin email accounts. If empty it will fallback to the accounts that have 'Receive System Emails' = yes.

This logic is now used on:
  1. manual override notifications
  2. geoip downloads
  3. user protection (new)
also new in this version is User Protection
I have renamed the user notification tab to user protection as it now does more then only notify users of logins on new devices and password / email changes in their account.

new is a cronjobs that will parse all user accounts and check their last login date with a configured max number of days. If the account matches then it will either be blocked (because not used for max number of days) or it will have the 'password reset required' field set.
This way we can crank up security (block old user accounts) and give even more security control to the site admin :)

anyway,
if you can test that would be great!

tips are welcome :)

Please Log in to join the conversation.

  • Norsk Jernbaneklubb
  • Topic Author
  • Offline
More
2 years 6 months ago #2033 by Norsk Jernbaneklubb
Replied by Norsk Jernbaneklubb on topic Question on New User Notification
Hi Ruud,

Thanks, this is working just fine. So far tested Email Change and New Device, and they were sent to the given address.

Please Log in to join the conversation.

More
2 years 6 months ago #2036 by Ruud van Lent
Replied by Ruud van Lent on topic Question on New User Notification
Top,
thanks for testing and confirming.
Any thoughts on the new User Protection features?

Please Log in to join the conversation.