0027572: Improve management of failed logins and locked accounts

ID	Project	Category	View Status	Date Submitted	Last Update

0027572	mantisbt	administration	public	2020-11-21 11:11	2021-01-05 18:59

Reporter	dregad	Assigned To	dregad
Priority	normal	Severity	minor	Reproducibility	N/A
Status	assigned	Resolution	open
Target Version	2.26.0

Summary	0027572: Improve management of failed logins and locked accounts
Description	Administrators currently have no way to identify locked or soon-to-be locked accounts. We should display the failed login count on Manage User pages, as well as an indication that the account is lock.
Tags	No tags attached.

atrol 2020-11-21 11:39 developer ~0064672	@dregad I got no approval from @vboctor for this, see discussion in https://github.com/mantisbt/mantisbt/pull/1632

dregad 2020-11-21 18:32 developer ~0064673	I had absolutely no recollection of this other issue and your PR, despite having approved it... but I failed to follow the subsequent discussion and did not realize you gave up on it. That said, it's funny that I came up with the same need as you several months later; actually it was requested to me by a project I'm helping occasionally. To be honest, I don't buy the it's clutter argument. As for the information not being actionable I also disagree, as it gives the admin an immediate view of accounts that are locked or about to be (this was requirement that I got). I don't know about the information inaccurate or irrelevant for auth plugins, I can't think of such scenario, but in that case as you proposed, not showing it when $g_max_failed_login_count is OFF should cover it.