Add Account Deactivation Feature for Administrators #710
Description
Description
Currently, administrators cannot directly deactivate a resident's account. The workaround of resetting a user’s password is neither intuitive nor ideal. We need to introduce a proper account deactivation feature that allows administrators to temporarily or permanently block a resident's access to the platform.
User Stories
1. Deactivating Accounts
As an Administrator I want to deactivate a resident’s account in cases of misconduct or violations, so I can block their access without relying on a password reset.
2. Reactivating Accounts
As an Administrator I want the ability to reactivate a deactivated account when necessary, so residents can regain access once conditions are met.
3. Show Account Status
As an Administrator I want to see an account’s status (active or deactivated) clearly in the user management interface, so I know whether a resident has access.
4. Log Deactivate/Reactivation
As the System it is important to log that a deactivation or account reactivation took place so that there is a traceable record of this happening.
Acceptance Criteria
- Deactivation Functionality
- A “Deactivate Account” button is added to the admin user management interface for each resident.
- Clicking this button immediately blocks the resident’s login access.
- A confirmation dialog appears before deactivating the account to prevent accidental actions.
- Reactivation Functionality
- Deactivated accounts have a "Reactive Account" button that is available.
- Clicking this button restores the resident's access.
- Account status indicator
- Ideally each resident's account status is shown with a visual indicator. If we want to "grey out" or label it then the Administrator should be clear to the Adminsitrator that it is deactivated.
- Logging
- Some sort of traceable record exists to indicate that the account was deactivated by an Administrator (and which administrator did it).
- Authentication
- Deactivated accounts cannot log in.
- When a deactivated user tries to log in they see a message, "Your account has been deactivated."