U4-10038 - Cancel events for User-events

Created by Jeffrey Schoemaker 20 Jun 2017, 06:47:12 Updated by Jeffrey Schoemaker 20 Jun 2017, 06:47:12

@sebastiaan has been creating user-events for User.LoggedOn, LoggedOut, ChangedPassword, etcetera. It would be great if you would have the option to cancel these events to for example; Cancel the logon-event because you added custom logic and based on that logic (invalid IP-address-range, weird time of day that you logon, etc) you want to cancel the logon-event.

Or cancel the PasswordChange-event because according to your logic (password cannot contain certain words) the password isn't correct.

I think this should apply to the following events:

  • AccountLocked
  • LoginSuccess
  • PasswordChanged

In case of the following events I can't think of a use case where it could be used (but of course you can add the cancel events)

  • AccountUnlocked
  • LoginFailed
  • LoginRequiresVerification
  • LogoutSuccess
  • ForgotPasswordChangedSuccess
  • ForgotPasswordRequested
  • PasswordReset
  • ResetAccessFailedCount

Hope this makes sense,

Jeffrey

Comments

Priority: Normal

Type: Feature (request)

State: Submitted

Assignee:

Difficulty: Easy

Category: Security

Backwards Compatible: True

Fix Submitted:

Affected versions: 7.6.4

Due in version:

Sprint:

Story Points:

Cycle: