Differential D20394 Diff 48672 src/applications/config/option/PhabricatorAuthenticationConfigOptions.php
Changeset View
Changeset View
Standalone View
Standalone View
src/applications/config/option/PhabricatorAuthenticationConfigOptions.php
| Show First 20 Lines • Show All 67 Lines • ▼ Show 20 Lines | return array( | ||||
| "new email addresses for these domains. If you configure this, ". | "new email addresses for these domains. If you configure this, ". | ||||
| "it implies @{config:auth.require-email-verification}.\n\n". | "it implies @{config:auth.require-email-verification}.\n\n". | ||||
| "You should omit the `@` from domains. Note that the domain must ". | "You should omit the `@` from domains. Note that the domain must ". | ||||
| "match exactly. If you allow `yourcompany.com`, that permits ". | "match exactly. If you allow `yourcompany.com`, that permits ". | ||||
| "`joe@yourcompany.com` but rejects `joe@mail.yourcompany.com`.")) | "`joe@yourcompany.com` but rejects `joe@mail.yourcompany.com`.")) | ||||
| ->addExample( | ->addExample( | ||||
| "yourcompany.com\nmail.yourcompany.com", | "yourcompany.com\nmail.yourcompany.com", | ||||
| pht('Valid Setting')), | pht('Valid Setting')), | ||||
| $this->newOption('auth.lock-config', 'bool', false) | |||||
| ->setBoolOptions( | |||||
| array( | |||||
| pht('Auth provider config must be unlocked before editing'), | |||||
| pht('Auth provider config can be edited without unlocking'), | |||||
| )) | |||||
| ->setSummary( | |||||
| pht( | |||||
| 'Require administrators to unlock the authentication provider '. | |||||
| 'configuration from the CLI before it can be edited.')) | |||||
| ->setDescription( | |||||
| pht( | |||||
| 'Normally, administrators configure authentication providers only '. | |||||
| 'once, immediately after instance creation. To further secure '. | |||||
| 'your instance, you can set this configuration option to `true`, '. | |||||
| 'which will require an adminstrator with CLI access to run '. | |||||
| '`bin/auth unlock` to make any later changes to authentication '. | |||||
| "provider configuration.\n\nAfter changing the config, you should ". | |||||
| 'run `bin/auth lock` again from the CLI.')) | |||||
epriestley: Maybe "run" vs "do" as a verb for running a CLI command. | |||||
| ->setLocked(true), | |||||
| $this->newOption('account.editable', 'bool', true) | $this->newOption('account.editable', 'bool', true) | ||||
| ->setBoolOptions( | ->setBoolOptions( | ||||
| array( | array( | ||||
| pht('Allow editing'), | pht('Allow editing'), | ||||
| pht('Prevent editing'), | pht('Prevent editing'), | ||||
| )) | )) | ||||
| ->setSummary( | ->setSummary( | ||||
| pht( | pht( | ||||
| Show All 20 Lines | |||||
Maybe "run" vs "do" as a verb for running a CLI command.