Dear OpenProject Community,

I am writing to propose a new feature for OpenProject that addresses the need for comprehensive network access management. The current system lacks detailed control over user access from unauthorized networks, which poses potential security risks and limits the ability to manage users connecting via unpredictable IP addresses. I believe the addition of a Network Access Management feature would greatly enhance the security and control administrators have over their OpenProject instances.

Problem Statement:

The current OpenProject system lacks a comprehensive way of managing network access for users. This creates potential security vulnerabilities and makes it difficult to manage users connecting from unauthorized or "Other" networks.

Proposed Solution:

I propose the development and integration of a Network Access Management feature into OpenProject with the following capabilities:

• User List Network Identification: Display the network from which a user is currently connected in the user list, providing administrators with quick identification of the source of the connection.
• Network Definition: Enable administrators to define and categorize different networks, providing flexibility and organization for managing access.
• Authorized Networks: Allow administrators to define authorized networks by specifying IP address ranges, network names, and assigning icons. This feature grants granular control over which networks are allowed access.
• Unauthorized Networks: Automatically consider any network not listed in the authorized network list as unauthorized. Additionally, provide the ability to selectively allow certain users to connect from these unauthorized networks, offering flexibility for exceptions or restricted access.
• Adding a Network: Add an option for administrators to create new networks with specific details such as the network name, icon, and IP address. Support for both IPv4 and IPv6 addresses should be included.
• Access for Other Networks: Provide control over which users can connect from unauthorized (other) networks, allowing administrators to define exceptions or restrict access as needed.

These features should be toggle-able based on administrator preference to provide flexibility and accommodate various use cases.

Benefits:

The proposed Network Access Management feature offers several benefits to OpenProject users and administrators:

1. Enhanced Security: Administrators gain greater control over user access, reducing the risk of unauthorized network connections and potential security breaches.
2. Granular Control: The ability to define authorized and unauthorized networks, as well as selectively allow users from unauthorized networks, provides administrators with precise control over access permissions.
3. Seamless User Experience: By integrating the feature directly into OpenProject, users can manage network access without relying on external tools, ensuring a more streamlined experience.
4. Flexibility: The ability to create and categorize networks, define exceptions, and toggle features based on specific requirements allows for customization and adaptability to different organizational needs.

I believe that implementing this Network Access Management feature will significantly enhance OpenProject's functionality and address a crucial security concern for administrators. It would be beneficial to organizations of all sizes that utilize OpenProject for project management.

I kindly request your consideration of this proposal. If you have any feedback, suggestions, or would like to discuss the details further, please feel free to share them on the OpenProject community forum.

Thank you for your attention to this matter, and I appreciate the excellent work you do in continually improving OpenProject.