Merge pull request #14365 from AlexVelezLl/picture_password_field

Add new picture_password field to FacilityUser

Author: LianaHarris360

kolibri/core/auth/migrations/0033_facilityuser_add_picture_password.py

@@ -0,0 +1,22 @@
+# Generated by Django 3.2.25 on 2026-03-11 18:56
+from django.db import migrations
+from django.db import models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("kolibriauth", "0032_alter_facilityuser_managers"),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name="facilityuser",
+            name="picture_password",
+            field=models.CharField(blank=True, default=None, max_length=8, null=True),
+        ),
+        migrations.AlterUniqueTogether(
+            name="facilityuser",
+            unique_together={("dataset", "picture_password")},
+        ),
+    ]

kolibri/core/auth/models.py

@@ -911,6 +911,18 @@ class FacilityUser(AbstractBaseUser, KolibriBaseUserMixin, AbstractFacilityDataM
 
     date_deleted = DateTimeTzField(null=True, blank=True)
 
+    # This field is used when picture login for learners is enabled. It stores the ordered
+    # picture sequence as a dot-separated string, e.g. "3.7.12". This field is only
+    # applicable to learners, so coach and admin users will never have this field set.
+    # The field is intentionally stored as plaintext, because coaches should be able to see
+    # learner passcodes.
+    picture_password = models.CharField(
+        max_length=8, null=True, blank=True, default=None
+    )
+
+    class Meta:
+        unique_together = (("dataset", "picture_password"),)
+
     def get_short_name(self):
         return self.full_name.split(" ", 1)[0]