Advanced user administration tools

This is a follow-up to https://feedback.getkirby.com/697

The latest security updates initiated discussions with our clients how to better administrate user accounts in Kirby. Currently user management is very basic inside the panel and you’ll have to write custom scripts or commands or have to change things by hand on the server.

Some ideas what would be helpful for administrators:

Forced password reset
Having the option to force a password reset for a single user or for all users. We currently use a CLI command to automatically set all passwords to a random 32 character string. It would be nice to have a dedicated method in the backend as well as an action in the panel interface. This would be especially helpful for installs with many users – think of password protected frontends – that want to make sure outdated account don’t impose a security risk.

A login emergency switch
Having the option to temporally disable the login for all users, or a group of users, or a specific one. Very helpful when mitigating an attact on a site. Like a maintenance mode but on the user level only.

Password strengths
I’m not sure if there is a way to do this without compromising password security, but having a way to see a password strength rating for all accounts or the own could be very helpful. Especially as a feedback for less experienced users that impose security risks with simple passwords.

Last login date and time
Displaying the last login date and time of a user in the user list with the option to filter/sort users by this date. Helpful to find non-active members.

Display settings for the accounts overview
Following up to this, a way to adjust the account list display in the panel similar to how pages sections can have custom texts and infos.

A users section
And following up to this, a users section that works like the pages section but for users. Filterable, sortable. Same as above but useful for custom overviews in the panel that only show a reduced list of users. E. g. those of the same user group or those with a custom setting on their account pages.