Welcome to the Metadecidim Community!
Welcome to Metadecidim community site. This is a democratic community that manages the Decidim project democratically in all its dimensions.
RegisterActive processes
Report a Bug
Active phase OpenSupport Forum
Active phase OpenPropose new functionalities for Decidim software
Active phase OpenActive assemblies
How do I take part in a process?
Meetings
Find out where and when you can participate in public meetings.
Debates
Debate and discuss, share your views and enrich the relevant topics.
Proposals
Make proposals, support existing ones and promote the changes you want to see.
Upcoming meetings
${title}
{{html description}}
${startTimeDay} ${startTimeMonth} ${startTimeYear}
${starTime}
{{html icon}}
{{html location}}
${address}
{{html locationHints}}
${address}
{{html locationHints}}
Last activity
-
20 Sep 17:19
-
New proposal at Propose new functionalities for Decidim software
CSV Census notifications or auto-authorizations
Since decidim 0.17 we have a CSV Census verification, so an organization admin can upload a list of email addresses to be validated as "organization census", but the users are not notified that they are in the Census, so we have to add a functionality to notify the users or auto-authorize existing users and auto-authorize new users registered with the email added to the census. We can also send emails with the notification: "Added to organization census" but is a issue with GDPR
-
20 Sep 09:44
-
New proposal at Propose new functionalities for Decidim software
Impersonate user session ending gains admin access
The impersonate user session is being used in the towns that we know to provide manual verification at a physical location to a user. A town official will enter the person's details to the impersonation form and then give the computer to the person. This works fine but one potential security issue it brings up is that when the session is ended from the top bar, the current user will gain back the rights to the impersonator's user account. This would be a problem if the impersonator is not closely following what the user is doing on the computer. Many times they are closely following or even assisting the user because this types of users generally have some issues working with the digital systems. I would suggest that after the impersonation session is ended, the user would be asked to enter their password again. This would make it impossible for the impersonation user to gain access to or see something they should not have access to. I wasn't sure if this is on purpose working as it works now, so I decided to post this as a feature proposal. However, this could potentially lead to some problems when there is a higher number of people.
-
20 Sep 08:47
-
20 Sep 08:27
-
18 Sep 17:30
-
18 Sep 17:13
-
18 Sep 10:19
-
18 Sep 10:07
