2022-09-27

Tasks

DONE Update security docs

- Strip most 15Five employee user accounts of the `is_superuser` flag

- Limit superuser access to

- Implement a locking mechanism on `is_superuser` wherein a user who does not access any Django admin pages within a 14-day window is automatically logged out

- Remove the `is_superuser` flag on account deactivation

- Create a metabase dashboard to track users who have access to Django admin in all cloud environments

- Add a general solution to our data model creation and modification tracking, similar to what we have on Company and User models already