01es

### Description Currently attachments can be uploaded using D'n'D or selecting files from a dialog. It would be great to also support the copy/paste mechanism, which is especially convenient for...

### Description `ActivePropertyValidator` does not process `@DeactivatableDependencies`, which may be defined for an activatable entity being deactivated, for determining "cascaded" active dependencies. This leads to situations where entity deactivation is...

### Description The Reference Hierarchy (original issue #1426) provides a way to see and traverse all entities that reference a given entity instance. Some of the referencing entities may be...

### Description Collectional editor has a regression where tapping an item does not select/unselect it, requiring to tap the checkbox for the item (1). The mouse pointer shows a correct...

Password change

2

Users should have the ability to change their passwords at will. However, the process of changing should be implemented in accordance with previously [outlined approach](https://github.com/fieldenms/tg/wiki/Web-Security:-safe-communication-and-authentication#password-strength) that would ensure password strength.

Users need to be informed of successful logins

1

### Description As part of further improvements to authentication management, it is proposed to implement a step whereby users get a notification email upon successful logins. Each time when a...

### Description It should not be possible to deactivate `UserRole` instance that are associated with active users. `UserRole`s are associated with users via `UserAndRoleAssociation`, which models many-2-many association and is...

Prevent reuse of the previous user password

1

### Description Often we come across requirements to prevent users from reusing 6 (or some other number) of their previous passwords upon resetting their password. We've looked into this practice...

### Description The authorisation mechanism that is currently based on method annotation with `@Authorise(Security Token)` needs to be generalised around the concept of categorisation of CO methods as defined in...

2FA with pluggable delivery mechanism

1

### Description A two-factor authentication (2FA) support is required to make TG-based application safer out-of-the-box. The delivery mechanism for security tokens should be pluggable. However, due to popularity of Google...