Hotfix release available: 2025-05-14b "Librarian". upgrade now! [56.2] (what's this?)
Hotfix release available: 2025-05-14a "Librarian". upgrade now! [56.1] (what's this?)
New release available: 2025-05-14 "Librarian". upgrade now! [56] (what's this?)
Hotfix release available: 2024-02-06b "Kaos". upgrade now! [55.2] (what's this?)
Hotfix release available: 2024-02-06a "Kaos". upgrade now! [55.1] (what's this?)
New release available: 2024-02-06 "Kaos". upgrade now! [55] (what's this?)
Hotfix release available: 2023-04-04b "Jack Jackrum". upgrade now! [54.2] (what's this?)
Hotfix release available: 2023-04-04a "Jack Jackrum". upgrade now! [54.1] (what's this?)
New release available: 2023-04-04 "Jack Jackrum". upgrade now! [54] (what's this?)
Hotfix release available: 2022-07-31b "Igor". upgrade now! [53.1] (what's this?)
Hotfix release available: 2022-07-31a "Igor". upgrade now! [53] (what's this?)
New release available: 2022-07-31 "Igor". upgrade now! [52.2] (what's this?)
New release candidate 2 available: rc2022-06-26 "Igor". upgrade now! [52.1] (what's this?)
New release candidate available: 2022-06-26 "Igor". upgrade now! [52] (what's this?)
Hotfix release available: 2020-07-29a "Hogfather". upgrade now! [51.4] (what's this?)
New release available: 2020-07-29 "Hogfather". upgrade now! [51.3] (what's this?)
New release candidate 3 available: 2020-06-09 "Hogfather". upgrade now! [51.2] (what's this?)
New release candidate 2 available: 2020-06-01 "Hogfather". upgrade now! [51.1] (what's this?)
New release candidate available: 2020-06-01 "Hogfather". upgrade now! [51] (what's this?)
Hotfix release available: 2018-04-22c "Greebo". upgrade now! [50.3] (what's this?)
Hotfix release available: 2018-04-22b "Greebo". upgrade now! [50.2] (what's this?)
impersonate_admin_user_of_subsite

Impersonate Admin User of Subsite

Super Site Admin should be able to login as admin of subsite. Once logged in he/she should have all the privileges of a subsite admin.

Design

The subsites can be on a subdomain or a separate domain. Because of this, using cookie for impersonation is not possible as cookies are not shared across domain.

Login Process-

  • Check if the email provided is the super site admin. This is done by comparing it with the value in application.yml(default_company/admin_user_email).
  • If the email is super site admin's and if the site is not default one proceed to next step. If the site is default then normal log-in process will happen.
  • Validate the email and password provided. If valid then continue with the next step else show a message that the validation failed.
  • Retrieve the details of the sites admin and then create a session.
  • If the session creation fails ( example - the admin has not yet activated his email etc), then show an error message
  • If the session is created, then the super admin will be logged into the site as site admin.

constraints imposed because of the above design

  • Super site admin email has to be unique in the database. ie no site should have an user with the same email of super admin.
  • If there is a change in the email of the super site admin, then the application.yml file needs to be updated and the application needs to restarted.
impersonate_admin_user_of_subsite.txt · Last modified: 2018/08/31 16:16 (external edit)