跳至内容
菜单
此问题已终结
1 回复
5749 查看

If a user fails to login with three attempts, I want that the administrator will be notified and the account blocked one day or the administrator unblock it.



形象
丢弃
最佳答案

Hi, I think you can follow these steps

1. Create login attempts session value

You will increment this value each time the user fail to connect

2. Deactivate the user if the login attempts session value is great than three

When the value will be greater than three, you will disable the user.
You can write a cron to reactivate the user, if you want.

I tried to make something. It works for me


# -*- coding: utf-8 -*-
from odoo import http
from odoo.http import request
from odoo.addons.web.controllers.main import Home

class LoginAttempts(Home):

@http.route()
def web_login(self, redirect=None, **kw):
response = super(LoginAttempts, self).web_login(redirect=redirect, **kw)
if response.qcontext.get('error'):
# Get LoginAttempts in session
login_attempts = request.session.get('loginAttempts')
if not login_attempts:
login_attempts = 0
# If user have done more than three login attemps
if int(login_attempts) >= 2:
# We search the user
user = request.env['res.users'].search([('login','=',kw.get('login'))])
if user:
# If we found it, you desactive it
user.write({'active': False})
login_attempts = -1
response.qcontext['error'] = "%s . %s" %(response.qcontext.get('error'), 'Your account is deactivate. Please contact the administrator')
# ... Send here an email to the administrator
# ... And other action that you want to make
request.session['loginAttempts'] = login_attempts + 1

return response
形象
丢弃
相关帖文 回复 查看 活动
1
2月 20
4645
1
7月 25
4154
1
5月 19
2686
3
1月 24
12314
1
10月 19
6929