site.ini [ReauthGroup_account] #

The block [ReauthGroup_account] of settings/site.ini, with 2 setting(s).

Rules, in every group: "module/view [token ...]"
module/view the view (view * for every view of the module); a POST to it is asked
* every request, GET too (a page that downloads, or a form with a file upload)
Name only a POST that carries this field (any of several names)
self, other only when the account addressed is the user's own / another user's
(content/edit of a user object, user/password, user/setting; the
pending account of an approval item of "Approve user accounts")
credentials only when the POST changes the login, e-mail or password of a user
!module/view never asked for this view (an exception to a module/* rule)
bulk only when several items are removed at once (BulkCount)
A group may name UserGroups[] (content object ids of user groups): it then asks only
their members; empty or missing: every user.

Never edit settings/site.ini itself: an update replaces it. Put the settings you change in an override, which wins over the shipped file:

• settings/override/site.ini.append.php for every siteaccess,
• settings/siteaccess/<siteaccess>/site.ini.append.php for one siteaccess,
• extension/<extension>/settings/site.ini.append.php in an extension (read when the extension is active).

Enabled #

The security settings of one's own account.

Default: true.

<?php /* #?ini charset="utf-8"?
# settings/override/site.ini.append.php
[ReauthGroup_account]
Enabled=true
*/ ?>

Rules #

"Sign out all other sessions" asks first too: someone at an unattended screen must not lock the owner out
"Secure your account" on the security activity signs every other session out, the same as above

Default: a list of 7: user/password self, user/passkeys *, user2fa/setup, apikey/list, content/edit self credentials, user/sessions self SaveMailButton RevokeOthersButton, user/security self SecureButton.

<?php /* #?ini charset="utf-8"?
# settings/override/site.ini.append.php
[ReauthGroup_account]
# an empty "Rules[]" first replaces the shipped list; without it the items are added
Rules[]
Rules[]=user/password self
Rules[]=user/passkeys *
Rules[]=user2fa/setup
Rules[]=apikey/list
Rules[]=content/edit self credentials
Rules[]=user/sessions self SaveMailButton RevokeOthersButton
Rules[]=user/security self SecureButton
*/ ?>

Related #

• All blocks of site.ini
• All INI files
• The settings page

Generated by ./console exp:help:examples from settings/site.ini. Do not edit this page: change the source and generate again (how). Free documentation: GFDL 1.3 or later.