The SIO2 project
  1. The SIO2 project
  2. SIO-2066

Enforce 2FA for contest admins

        Details

        • Type: Improvement Improvement
        • Status: Resolved Resolved
        • Priority: Minor Minor
        • Resolution: Obsolete
        • Affects Version/s: Current Version
        • Fix Version/s: None
        • Component/s: OIOIOI
        • Labels:
          None

          Description

          For security reason, add to contest settings option "Contests admins must have 2FA enabled.". Otherwise, their contest admin privileges will be revoked until they enable 2FA. They should see message that they need to enable 2FA while having activated contest to which they have admin privileges (analogous to: https://gerrit.sio2project.mimuw.edu.pl/#/c/2953/3/oioioi/base/templates/base.html).

          PS following the rule "sum(security mechanisms) = min(security mechanisms)", consider if effective superusers should have revoked privileges or not (I guess effective superusers shouldn't be an exception).

            Activity

            Szymon Acedański made changes -
            Field Original Value New Value
            Status New [ 10000 ] Resolved [ 5 ]
            Assignee Szymon Acedański [ accek ]
            Resolution Obsolete [ 7 ]

              People

              • Assignee:
                Szymon Acedański
                Reporter:
                Artur Jamro
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: