Anne Mickan

Also it appears that updating a display set with a json file (json type but not stored in database) does not work. The `DisplaySetUpdate` view tries to save the file...

I remember that we had this issue once before. I would have thought that we fixed it then... but I guess not. I will see if I can find our...

Can't find anything... only that we used to filter by creator, but removed that here: https://github.com/comic/grand-challenge.org/commit/10fa528855b986914a76e0071b637c9780852a6e#diff-3de0492fca47670a7223a3218b626d8a5ae21bddebf88c6fc58499e64447eecd I think we just need to add that filter back.

I was never able to reproduce this locally, so not sure. We'll know soon.

There is not a lot of documentation yet, but having taken a look at the codebase, it should all work out of the box, _except for requiring 2FA for staff...

That sound nice. I'll give it a try.

I made a [PR ](https://github.com/pennersr/django-allauth/pull/3710#issuecomment-2076969103)to allauth a while ago to add middleware to force MFA for certain users, but it sounds as though it will not make it into allauth....

> > another way of nudging users into turning on MFA would be to add a login stage that must be completed before the user can proceed. > > Is...

Ok, I will investigate

Ok, I think this works well. The only downside is that it is only triggered when someone logs in, not when they are already logged in like with the middleware,...