Add Account Deactivation Feature for Administrators

[jtucholski]

Description

Currently, administrators cannot directly deactivate a resident's account. The workaround of resetting a user’s password is neither intuitive nor ideal. We need to introduce a proper account deactivation feature that allows administrators to temporarily or permanently block a resident's access to the platform.

User Stories

1. Deactivating Accounts

As an Administrator I want to deactivate a resident’s account in cases of misconduct or violations, so I can block their access without relying on a password reset.

2. Reactivating Accounts

As an Administrator I want the ability to reactivate a deactivated account when necessary, so residents can regain access once conditions are met.

3. Show Account Status

As an Administrator I want to see an account’s status (active or deactivated) clearly in the user management interface, so I know whether a resident has access.

4. Log Deactivate/Reactivation

As the System it is important to log that a deactivation or account reactivation took place so that there is a traceable record of this happening.

Acceptance Criteria

• Deactivation Functionality
  • A “Deactivate Account” button is added to the admin user management interface for each resident.
  • Clicking this button immediately blocks the resident’s login access.
  • A confirmation dialog appears before deactivating the account to prevent accidental actions.
• Reactivation Functionality
  • Deactivated accounts have a "Reactive Account" button that is available.
  • Clicking this button restores the resident's access.
• Account status indicator
  • Ideally each resident's account status is shown with a visual indicator. If we want to "grey out" or label it then the Administrator should be clear to the Adminsitrator that it is deactivated.
• Logging
  • Some sort of traceable record exists to indicate that the account was deactivated by an Administrator (and which administrator did it).
• Authentication
  • Deactivated accounts cannot log in.
  • When a deactivated user tries to log in they see a message, "Your account has been deactivated."