A5WS_LockOutUserRelease()

[iRadiate]

Has anyone used the A5WS_LockOutUserRelease() function to unlock a locked out user?

http://wiki.alphasoftware.com/A5WS_L...lease+Function

If so, would you mind sharing how you accomplished this?

Thanks,
Stephen

[iRadiate]

Re: A5WS_LockOutUserRelease()

Okay, I have been playing around with this and have a basic implementation working.
For anyone else who might be interested, here's how I did this.

1. I have security set so that if a user attempts more than 3 logins unsuccessfully they are locked out. I like this as a way to prevent multiple attempts at guessing login or using brute force attempts.

1._Security_Settings.png

2. Here is what the user sees if they try to login more than 3 times unsuccessfully:

2._Login_Attempts_Exceeded.png

3. I use a dialog for editing user security ... this is based on the security videos D_SF_1 through D_SF_4. See http://news.alphasoftware.com/v11pre...urityFramework
On the Dialog, I have a button called Release:

3._Dialog_Release.png

4. In the button OnClick javascript event, I have an action javascript event that does an ajaxcallback. This calls a function called Unlock.

4._Button_Action_Javascript.png

5. Finally, in the xbasic functions area of the Dialog, I have declared the unlock function:

5._XBasic_Function.png

The edit security Dialog requires administrator privileges, so now I just login as administrator, click the edit security link for the locked-out user and click the release button.

Hope this can help someone else.
Stephen

[kkfin]

Re: A5WS_LockOutUserRelease()

1. I have security set so that if a user attempts more than 3 logins unsuccessfully they are locked out.

3 attempts seems to be the standard, but why? I personally think that 3 is too little and just makes unnecessary locked out situations to happen too often.

5 attempts gives a little room for user mistakes but does not affect to security a bit.

[iRadiate]

Re: A5WS_LockOutUserRelease()

This wasn't intended to be an opinion on industry best practices for account lockout.
I was trying to show how I actually implemented the reset in web app by adding a button to the dialog.
Obviously you can set the login attempts to whatever you like.

[kkfin]

Re: A5WS_LockOutUserRelease()

1. I have security set so that if a user attempts more than 3 logins unsuccessfully they are locked out. I like this as a way to prevent multiple attempts at guessing login or using brute force attempts.

My comment was just for above design question your raised up and therefore also wanted to pay attention how to prevent unnecessary user lock out situations and so help administrator work.

Did not understand you did not want comments.

[iRadiate]

Re: A5WS_LockOutUserRelease()

My comment was just for above design question your raised up and therefore also wanted to pay attention how to prevent unnecessary user lock out situations and so help administrator work.

Did not understand you did not want comments.

Ken, it's not that I didn't want comments. I appreciate your input. I am just saying that the reason for posting this at all was to help those who may also be wondering how to accomplish the mechanics of resetting the lockout in Alpha. Of course there may be many other ways to do it as well. My comment that you are referring was generic and debating the pros & cons of the proper lockout best practice could take an entire thread by itself. Every situation is different. Microsoft has a 52 page document just on this topic ... http://www.microsoft.com/download/en...s.aspx?id=6218

So, please don't take my comments the wrong way, I do appreciate your input.

Stephen

[Charles Hoens]

Re: A5WS_LockOutUserRelease()

Stephen:

I like this very much. Thanks for sharing. I was trying to put a variable on the dialog showing whether the user was locked out or not. I tried using a radiobutton as a logical, but can't seem to discover how to get that into the dialog. Did you have any ideas?

Charlie

[iRadiate]

Re: A5WS_LockOutUserRelease()

Thanks Charlie, glad it helped. I haven't tried the a5ws_LockoutUserStatus() but it would be useful. I'll play around with it if I get some time.

Since I could never get the Delete Security feature to work per the videos, I modified my dialog slightly so that one button unlocks the account and another locks it using a5ws_LockOutUserSet().
I find this to be just as useful in my case.

Lock-Unlock.png

Stephen

[Charles Hoens]

Re: A5WS_LockOutUserRelease()

I like it! I don't use the lockout feature as much as I have built into my password table an "IsActive" field. This allows different users with different privs to effectively "deactivate" a user, however the good news is that I can reactivate them if needs be.

I still would like to find out how to put a variable on the dialog. Somehow, it escapes me right now after 15 hours of programming.

Also, I'd like to see how you created your buttons. They look great and professional.

Charlie

[iRadiate]

Re: A5WS_LockOutUserRelease()

Also, I'd like to see how you created your buttons.

The buttons are easy:
1. In the Button properties, check Advanced Button Styling
2. In the Button Appearance properties, choose Image Followed By Text
3. Select your image to put on the button by clicking the edit box for Image Name
1.Button.png
4. I used the built in Alpha image collection (or you could add your own), click Select
5. Choose your image and Insert
2.Lock.png

That's it.
Stephen