Evaluate adding user_expire module for Guardr core

Created on 6 July 2023, over 1 year ago
Updated 3 August 2023, over 1 year ago

Problem/Motivation

Given there is a requirement in the current PCI DSS as well as in the next version to disable inactive accounts
PCI DSS v3.2 (8.1.4 Remove/disable inactive user accounts within 90 days.)
PCI DSS v4.0 (8.2.6 Inactive user accounts are removed or disabled within 90 days of inactivity.)

Can this module User Expire module be evaluated for addition?

Proposed resolution

Add https://www.drupal.org/project/user_expire and add some default configuration that will block accounts that have been inactive for 90 days.

Remaining tasks

Test out the module
Document any config we want to enable for it
Document any issues noticed for discussion
Recommend if the module should be enabled on Guardr install or just available

Feature request
Status

Active

Version

2.0

Component

Installed modules

Created by

🇬🇧United Kingdom the_g_bomb

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Production build 0.71.5 2024