Skip ke Konten
Menu
Pertanyaan ini telah diberikan tanda
1 Balas
5741 Tampilan

If a user fails to login with three attempts, I want that the administrator will be notified and the account blocked one day or the administrator unblock it.



Avatar
Buang
Jawaban Terbai

Hi, I think you can follow these steps

1. Create login attempts session value

You will increment this value each time the user fail to connect

2. Deactivate the user if the login attempts session value is great than three

When the value will be greater than three, you will disable the user.
You can write a cron to reactivate the user, if you want.

I tried to make something. It works for me


# -*- coding: utf-8 -*-
from odoo import http
from odoo.http import request
from odoo.addons.web.controllers.main import Home

class LoginAttempts(Home):

@http.route()
def web_login(self, redirect=None, **kw):
response = super(LoginAttempts, self).web_login(redirect=redirect, **kw)
if response.qcontext.get('error'):
# Get LoginAttempts in session
login_attempts = request.session.get('loginAttempts')
if not login_attempts:
login_attempts = 0
# If user have done more than three login attemps
if int(login_attempts) >= 2:
# We search the user
user = request.env['res.users'].search([('login','=',kw.get('login'))])
if user:
# If we found it, you desactive it
user.write({'active': False})
login_attempts = -1
response.qcontext['error'] = "%s . %s" %(response.qcontext.get('error'), 'Your account is deactivate. Please contact the administrator')
# ... Send here an email to the administrator
# ... And other action that you want to make
request.session['loginAttempts'] = login_attempts + 1

return response
Avatar
Buang
Post Terkait Replies Tampilan Aktivitas
1
Feb 20
4623
1
Jul 25
4154
1
Mei 19
2656
3
Jan 24
12301
1
Okt 19
6918