Experiencing a 401 Unauthorized Error During Update?

If you're seeing a 401 Unauthorized error when trying to update your Joomla extension, it's likely due to our new two-factor authentication (2FA) security measure for your Download ID.
To resolve this, check your email (Spam folder?) for a message to approve your server or device, or read our detailed blog post here( onlinecommunityhub.nl/best-practice/new-...-extension-downloads) to understand the steps involved. This will guide you through approving your server for future updates.

Implemented Question on New User Notification

  • Norsk Jernbaneklubb
  • Onderwerp Auteur
  • Offline
Meer
2 jaren 5 maanden geleden - 2 jaren 5 maanden geleden #2022 door Norsk Jernbaneklubb
Question on New User Notification werd gestart door Norsk Jernbaneklubb
The notifications are sent to Site administrator(s). This obviously means all Super Users, and I assume also blocked / disabled Super Users?
Well, disabled users or not, we would like the possibility to say explicitly which admin email addresses that will receive these notifications, like we can in other extensions, e.g. Admin Tools and LOGman.

Would this be a possible enhancement?

Regards,
Frode

DOWNLOADLINK TESTVERSION
Dit bericht bevat vertrouwelijke informatie
Laatst bewerkt 2 jaren 5 maanden geleden door Ruud van Lent. Reden: added link to test version

Graag Inloggen deelnemen aan het gesprek.

Meer
2 jaren 5 maanden geleden #2023 door Ruud van Lent
Beantwoord door Ruud van Lent in topic Question on New User Notification
Hi Frode,
the notifications are sent to all user accounts that have 'receive system emails = yes' configured in their account.
This because I classified this as a system email.
I know that this system email functionality is build in into Joomla but almost no extension makes (correct) use of it.

It is also sending to disabled users, this is actually a bug :) Thanks for pointing that out to me :)

The way it is set now, the (super users) can configure themselves if they want to receive these emails or not (they just need to configure the receive system emails in their account).

Would that be an option for you and your administrators?

Graag Inloggen deelnemen aan het gesprek.

  • Norsk Jernbaneklubb
  • Onderwerp Auteur
  • Offline
Meer
2 jaren 5 maanden geleden #2024 door Norsk Jernbaneklubb
Beantwoord door Norsk Jernbaneklubb in topic Question on New User Notification
Hi Ruud

Ok, that's interesting. I've always wondered as to whether that  function was being used at all. But this actually means that anyone with 'receive system emails = yes' will get the mails, even if they're not Super Users (well of course that shouldn't happen, so it's more of a theoretical problem).

But I think we still preferr the explicit email option to have full control, but this will definetly do for the time being. Please explain the system email details in the docs.

Oh, and I forgot to mention the bug I found. You are using html-code in the email Subject line, which comes out like this:
Password for <strong>'User Name'</strong> changed on 'Site Name'

Graag Inloggen deelnemen aan het gesprek.

Meer
2 jaren 5 maanden geleden #2025 door Ruud van Lent
Beantwoord door Ruud van Lent in topic Question on New User Notification
Hi Frode,

will push out a new release today that will fix the mailing of blocked uses and also the language string.
This release will also have a new feature: it now has a 'allow from' field for the back-end administrator protection. here you can set e.g. your ip address. When matched you will not be prompted for the apache login, when not matched you will :)

I will add an option for setting a specific (one or more) email accounts (bcc). This will not be part of the next release.

Graag Inloggen deelnemen aan het gesprek.

  • Norsk Jernbaneklubb
  • Onderwerp Auteur
  • Offline
Meer
2 jaren 5 maanden geleden #2026 door Norsk Jernbaneklubb
Beantwoord door Norsk Jernbaneklubb in topic Question on New User Notification
Hi Ruud

Ok thanks, that will be great. However I do have one more report for you, so you might want to "hold your horses" as they say. Coming up in a moment... 

Graag Inloggen deelnemen aan het gesprek.

Meer
2 jaren 5 maanden geleden #2027 door Ruud van Lent
Beantwoord door Ruud van Lent in topic Question on New User Notification
I'm holding the horses :)

Graag Inloggen deelnemen aan het gesprek.

Meer
2 jaren 5 maanden geleden #2030 door Ruud van Lent
Beantwoord door Ruud van Lent in topic Question on New User Notification
Horses released :)

Graag Inloggen deelnemen aan het gesprek.

Meer
2 jaren 5 maanden geleden #2032 door Ruud van Lent
Beantwoord door Ruud van Lent in topic Question on New User Notification
Hi Frode,

in the first post (yours) of this topic there is a link to a test version.
In this version I have refactored the admin accounts email selection.

Now there is a (advanced tab) field where you can specify one or more admin email accounts. If empty it will fallback to the accounts that have 'Receive System Emails' = yes.

This logic is now used on:
  1. manual override notifications
  2. geoip downloads
  3. user protection (new)
also new in this version is User Protection
I have renamed the user notification tab to user protection as it now does more then only notify users of logins on new devices and password / email changes in their account.

new is a cronjobs that will parse all user accounts and check their last login date with a configured max number of days. If the account matches then it will either be blocked (because not used for max number of days) or it will have the 'password reset required' field set.
This way we can crank up security (block old user accounts) and give even more security control to the site admin :)

anyway,
if you can test that would be great!

tips are welcome :)

Graag Inloggen deelnemen aan het gesprek.

  • Norsk Jernbaneklubb
  • Onderwerp Auteur
  • Offline
Meer
2 jaren 5 maanden geleden #2033 door Norsk Jernbaneklubb
Beantwoord door Norsk Jernbaneklubb in topic Question on New User Notification
Hi Ruud,

Thanks, this is working just fine. So far tested Email Change and New Device, and they were sent to the given address.

Graag Inloggen deelnemen aan het gesprek.

Meer
2 jaren 5 maanden geleden #2036 door Ruud van Lent
Beantwoord door Ruud van Lent in topic Question on New User Notification
Top,
thanks for testing and confirming.
Any thoughts on the new User Protection features?

Graag Inloggen deelnemen aan het gesprek.