The per-tool page (e.g. https://toolsadmin.wikimedia.org/tools/id/aaaaaa) should provide a UI for disabling/enabling a tool.
disable
On the backend, disabling a tool should change three ldap settings:
- pwdAccountLockedTime set to the current time
- pwdPolicySubentry set to cn=disabled,ou=ppolicies,dc=wikimedia,dc=org
- loginShell: /bin/disabledtoolshell
Once a tool is disabled, most UI options should also be disabled. The page should include a note about the tool being disabled along with a countdown or date about when the tool will be deleted or archived. It should also provide a widget to re-enable the tool.
enable
On the backend, enabling a tool should change three ldap settings:
- pwdAccountLockedTime cleared
- pwdPolicySubentry cleared
- loginShell: /bin/bash
delete
The 'delete tool' feature should only be available to toolforge admins. Ideally it's available on some sort of bulk UI but a per-tool option would also be ok.
Deleting a tool should make the following ldap changes:
- pwdAccountLockedTime set to 000001010000Z (indicates 'delete immediately')
- pwdPolicySubentry set to cn=disabled,ou=ppolicies,dc=wikimedia,dc=org
- loginShell: /bin/disabledtoolshell
A deleted tool should display all the same UI features as a disabled tool, but there should NOT be an 'enable' option present.