- 🇵🇰Pakistan Ahmed.Raza
1.1.1 version provides site administrators to check whether to allow users to enable/disable 2FA via email or not.
Related to prior administrator issue. If OTP is a standard security measure, users shouldn't be able to disable it, even accidentally.
Simplest method is to remove their access to the 2FA page. I guess the simplest would be reading a config flag for the module that skips the currentUser part of the 2FA settings form access check. Looks like Drupal just hides the link if the page is access restricted.
Will add any patches I do below, just trying this out really, not sure if I want it myself.
Fixed
1.0
Code
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.
1.1.1 version provides site administrators to check whether to allow users to enable/disable 2FA via email or not.