Allow admins to disable the 2FA for a standard user

app/Controller/Twofactor.php

@@ -137,4 +137,31 @@ class Twofactor extends User
             'title' => t('Check two factor authentication code'),
         )));
     }
+
+    /**
+     * Disable 2FA for a user
+     *
+     * @access public
+     */
+    public function disable()
+    {
+        $user = $this->getUser();
+
+        if ($this->request->getStringParam('disable') === 'yes') {
+
+            $this->checkCSRFParam();
+
+            $this->user->update(array(
+                'id' => $user['id'],
+                'twofactor_activated' => 0,
+                'twofactor_secret' => '',
+            ));
+
+            $this->response->redirect($this->helper->url('user', 'show', array('user_id' => $user['id'])));
+        }
+
+        $this->response->html($this->layout('twofactor/disable', array(
+            'user' => $user,
+        )));
+    }
 }

app/Locale/da_DK/translations.php

@@ -866,4 +866,6 @@ return array(
     // 'Help on Mailgun integration' => '',
     // 'Sendgrid (incoming emails)' => '',
     // 'Help on Sendgrid integration' => '',
+    // 'Disable two factor authentication' => '',
+    // 'Do you really want to disable the two factor authentication for this user: "%s"?' => '',
 );

app/Locale/de_DE/translations.php

@@ -866,4 +866,6 @@ return array(
     // 'Help on Mailgun integration' => '',
     // 'Sendgrid (incoming emails)' => '',
     // 'Help on Sendgrid integration' => '',
+    // 'Disable two factor authentication' => '',
+    // 'Do you really want to disable the two factor authentication for this user: "%s"?' => '',
 );

app/Locale/es_ES/translations.php

@@ -866,4 +866,6 @@ return array(
     // 'Help on Mailgun integration' => '',
     // 'Sendgrid (incoming emails)' => '',
     // 'Help on Sendgrid integration' => '',
+    // 'Disable two factor authentication' => '',
+    // 'Do you really want to disable the two factor authentication for this user: "%s"?' => '',
 );

app/Locale/fi_FI/translations.php

@@ -866,4 +866,6 @@ return array(
     // 'Help on Mailgun integration' => '',
     // 'Sendgrid (incoming emails)' => '',
     // 'Help on Sendgrid integration' => '',
+    // 'Disable two factor authentication' => '',
+    // 'Do you really want to disable the two factor authentication for this user: "%s"?' => '',
 );

app/Locale/fr_FR/translations.php

@@ -868,4 +868,6 @@ return array(
     'Help on Mailgun integration' => 'Aide sur l\'intégration avec Mailgun',
     'Sendgrid (incoming emails)' => 'Sendgrid (emails entrants)',
     'Help on Sendgrid integration' => 'Aide sur l\'intégration avec Sendgrid',
+    'Disable two factor authentication' => 'Désactiver l\'authentification à deux facteurs',
+    'Do you really want to disable the two factor authentication for this user: "%s"?' => 'Voulez-vous vraiment désactiver l\'authentification à deux facteurs pour cet utilisateur : « %s » ?',
 );

app/Locale/hu_HU/translations.php

@@ -866,4 +866,6 @@ return array(
     // 'Help on Mailgun integration' => '',
     // 'Sendgrid (incoming emails)' => '',
     // 'Help on Sendgrid integration' => '',
+    // 'Disable two factor authentication' => '',
+    // 'Do you really want to disable the two factor authentication for this user: "%s"?' => '',
 );

app/Locale/it_IT/translations.php

@@ -866,4 +866,6 @@ return array(
     // 'Help on Mailgun integration' => '',
     // 'Sendgrid (incoming emails)' => '',
     // 'Help on Sendgrid integration' => '',
+    // 'Disable two factor authentication' => '',
+    // 'Do you really want to disable the two factor authentication for this user: "%s"?' => '',
 );

app/Locale/ja_JP/translations.php

@@ -866,4 +866,6 @@ return array(
     // 'Help on Mailgun integration' => '',
     // 'Sendgrid (incoming emails)' => '',
     // 'Help on Sendgrid integration' => '',
+    // 'Disable two factor authentication' => '',
+    // 'Do you really want to disable the two factor authentication for this user: "%s"?' => '',
 );

app/Locale/nl_NL/translations.php

@@ -866,4 +866,6 @@ return array(
     // 'Help on Mailgun integration' => '',
     // 'Sendgrid (incoming emails)' => '',
     // 'Help on Sendgrid integration' => '',
+    // 'Disable two factor authentication' => '',
+    // 'Do you really want to disable the two factor authentication for this user: "%s"?' => '',
 );

app/Locale/pl_PL/translations.php

@@ -866,4 +866,6 @@ return array(
     // 'Help on Mailgun integration' => '',
     // 'Sendgrid (incoming emails)' => '',
     // 'Help on Sendgrid integration' => '',
+    // 'Disable two factor authentication' => '',
+    // 'Do you really want to disable the two factor authentication for this user: "%s"?' => '',
 );

app/Locale/pt_BR/translations.php

@@ -866,4 +866,6 @@ return array(
     // 'Help on Mailgun integration' => '',
     // 'Sendgrid (incoming emails)' => '',
     // 'Help on Sendgrid integration' => '',
+    // 'Disable two factor authentication' => '',
+    // 'Do you really want to disable the two factor authentication for this user: "%s"?' => '',
 );

app/Locale/ru_RU/translations.php

@@ -866,4 +866,6 @@ return array(
     // 'Help on Mailgun integration' => '',
     // 'Sendgrid (incoming emails)' => '',
     // 'Help on Sendgrid integration' => '',
+    // 'Disable two factor authentication' => '',
+    // 'Do you really want to disable the two factor authentication for this user: "%s"?' => '',
 );

app/Locale/sr_Latn_RS/translations.php

@@ -866,4 +866,6 @@ return array(
     // 'Help on Mailgun integration' => '',
     // 'Sendgrid (incoming emails)' => '',
     // 'Help on Sendgrid integration' => '',
+    // 'Disable two factor authentication' => '',
+    // 'Do you really want to disable the two factor authentication for this user: "%s"?' => '',
 );

app/Locale/sv_SE/translations.php

@@ -866,4 +866,6 @@ return array(
     // 'Help on Mailgun integration' => '',
     // 'Sendgrid (incoming emails)' => '',
     // 'Help on Sendgrid integration' => '',
+    // 'Disable two factor authentication' => '',
+    // 'Do you really want to disable the two factor authentication for this user: "%s"?' => '',
 );

app/Locale/th_TH/translations.php

@@ -866,4 +866,6 @@ return array(
     // 'Help on Mailgun integration' => '',
     // 'Sendgrid (incoming emails)' => '',
     // 'Help on Sendgrid integration' => '',
+    // 'Disable two factor authentication' => '',
+    // 'Do you really want to disable the two factor authentication for this user: "%s"?' => '',
 );

app/Locale/tr_TR/translations.php

@@ -866,4 +866,6 @@ return array(
     // 'Help on Mailgun integration' => '',
     // 'Sendgrid (incoming emails)' => '',
     // 'Help on Sendgrid integration' => '',
+    // 'Disable two factor authentication' => '',
+    // 'Do you really want to disable the two factor authentication for this user: "%s"?' => '',
 );

app/Locale/zh_CN/translations.php

@@ -866,4 +866,6 @@ return array(
     // 'Help on Mailgun integration' => '',
     // 'Sendgrid (incoming emails)' => '',
     // 'Help on Sendgrid integration' => '',
+    // 'Disable two factor authentication' => '',
+    // 'Do you really want to disable the two factor authentication for this user: "%s"?' => '',
 );

app/Model/Acl.php

@@ -74,6 +74,7 @@ class Acl extends Base
         'project' => array('remove'),
         'hourlyrate' => '*',
         'currency' => '*',
+        'twofactor' => array('disable'),
     );
 
     /**

app/Template/twofactor/disable.php

@@ -0,0 +1,14 @@
+<div class="page-header">
+    <h2><?= t('Disable two factor authentication') ?></h2>
+</div>
+
+<div class="confirm">
+    <p class="alert alert-info">
+        <?= t('Do you really want to disable the two factor authentication for this user: "%s"?', $user['name'] ?: $user['username']) ?>
+    </p>
+
+    <div class="form-actions">
+        <?= $this->a(t('Yes'), 'twofactor', 'disable', array('user_id' => $user['id'], 'disable' => 'yes'), true, 'btn btn-red') ?>
+        <?= t('or') ?> <?= $this->a(t('cancel'), 'user', 'show', array('user_id' => $user['id'])) ?>
+    </div>
+</div>

app/Template/user/sidebar.php

@@ -42,6 +42,10 @@
                 <li>
                     <?= $this->a(t('Two factor authentication'), 'twofactor', 'index', array('user_id' => $user['id'])) ?>
                 </li>
+            <?php elseif ($this->userSession->isAdmin() && $user['twofactor_activated'] == 1): ?>
+                <li>
+                    <?= $this->a(t('Two factor authentication'), 'twofactor', 'disable', array('user_id' => $user['id'])) ?>
+                </li>
             <?php endif ?>
 
             <li>