TODO:

must-have

  • Session Timeout Handling
  • History / Back-Button / Routing
  • Improve remember me. Logout should only delete the current remember me token and not all
  • Enhance accesslog. Show city and ip. With GeoIP
  • View for all users that shows 10 last logins
  • Email template system. Need a nice password reset email.

nice-to-have

  • Autostart a view after the user logged in
  • Currently logged on users view
  • Two factor authentication with TOTP RFC 6238 (Google Authenticator)
  • Minify javascript in a role specific way. A normal user should not get the javascript code for admin
  • Loading masks
  • Do not save if there are no changes (isDirty). Save server round trip

extjs bugs

  • tree selectPath. tab switch does not select the corresponding tree node
  • msgTarget:'side' bug