User card, General tab

The General tab is the first tab of the user card. It holds the identity of the account, the sign-in switches and the personal settings. The form is enterprise_user_basic. The data object is enterprise_user (table enterprise.user).

The card opens on the right of the Users list. Its tabs are General, Warehouses & Roles and API Keys.

Toolbar

Button	What it does	Task page
Save	Saves the card. A new user is created, an existing one is updated (generic_save).	Creating a user
Revert	Reads the card again from the server and drops your unsaved edits (generic_refresh).
Delete	Deletes the user and goes back (generic_delete).	Deleting a user

Fields

The fields are in four blocks: the main block, STATUS, AUDIT and PREFERENCES.

Main block

Label	Column	Type	Required	Allowed values and default	What it does
Login	username	Text, up to 128 characters. Unique.	Yes	Any text. A duplicate is refused with User {username} already exists.	The name typed at sign-in. Matching is exact: Anna and anna are two logins. (The sign-in throttle folds case; the lookup does not.)
Full name	full_name	Text, up to 200 characters	Yes (screen). The column accepts empty.	Any text.	Shown in the Users list and as the person's name. The login is shown when it is empty.
Email	email	Text, up to 120 characters	Yes	Any text. Not checked for format by the database.	Contact address.
Employee ID	employee_id	Text, up to 50 characters	No	Any text.	Stored only. It has no effect today.
Language	locale	Drop-down of active languages	Yes in the database	The active rows of locale: en English, ru Русский, kk Қазақша.	The language of the screens for this user (auth/context.rs:118).
Password	pwd	Password field	No on the screen	Any text. Empty means "keep the current password".	Sets a new password. The stored value is an Argon2id hash. The field is always empty when the card opens, because the hash is never sent to the screen. See Sign-in, passwords and sessions.
Type	typ	Drop-down	Yes	User (default), Admin (Administrator), Sys (System), Agent.	Admin and Sys skip permission checks. Only such a user may set the field. See User types and statuses.

STATUS block

Label	Column	Type	Required	Allowed values and default	What it does
Status	status	Drop-down	Yes	Active (default), Invited, Locked, Disabled.	Locked and Disabled stop all sign-in, including sessions already open.
API access	api_access	Switch	No	On (default) or off.	When off, the managed API keys of this user are refused. Cookie sign-in is not affected.
RF device login	rf_login	Switch	No	On (default) or off.	When off, sign-in from the RF handheld is refused. Browser sign-in is not affected.

AUDIT block

All four fields are read only. The server writes them.

Label	Column	Type	What it shows
Created	add_when	Date and time	When the account was created.
Last login	last_login_at	Date and time	The last successful sign-in by password (/api/login). The failure count is set back to 0 at the same time.
Failed attempts (24h)	failed_login_attempts	Whole number	The failed password attempts in a rolling 24 hours. When the last failure is older than 24 hours, the next failure restarts the count at 1 (crates/libs/wms-lib-core/src/model/user.rs:810).
Password age, days	computed from pwd_changed_at	Whole number	Whole days since the stored password hash last changed. It is empty when no change is recorded. A hash that is rebuilt after a sign-in to upgrade its scheme also resets this age.

The column last_failed_login_at is stored but has no field on the card.

PREFERENCES block

Label	Column	Type	Required	Allowed values and default	What it does
Timezone	timezone	Drop-down, up to 50 characters	Yes in the database	The active values of the list TIMEZONE, for example UTC, Europe/Berlin, Europe/Moscow, Europe/Kyiv, Asia/Dubai, America/New_York.	The zone in which this user sees dates and times (components/layout/value_format.rs:87).
Date Format	date_format	Drop-down, up to 20 characters	Yes in the database	The active values of the list DATEFORMAT, for example yyyy-MM-dd, dd.MM.yyyy, MM/dd/yyyy, dd/MM/yyyy HH:mm:ss.	How this user sees dates (value_format.rs:95).
Theme	mode	Drop-down, up to 20 characters	Yes in the database	dark (Dark theme), light (Light theme).	The colour theme at sign-in (auth/session_init.rs:49).

The lists TIMEZONE, DATEFORMAT and THEME are rows of enterprise.code_list_value (crates/libs/wms-lib-sql/sql/wms-enterprise/migrations/001_baseline.sql:990). The lists USER_TYP and USER_STATUS come from migration 011.

Not confirmed by code: what the New User card fills in for Language, Timezone, Date Format and Theme, and what happens when you save a new user with an empty Password. The database requires the four preferences and the create call takes the password as a required text. To verify: press New User, fill only Login, Full name, Email, Type, Status, press Save, and note the message.

What it affects

Field	Read by
Status	Sign-in, every request with a session cookie, and every managed API key (crates/libs/wms-lib-auth/src/user_status.rs:52, crates/libs/wms-lib-web/src/middleware/mw_auth.rs:617).
Type	Every permission check (crates/libs/wms-lib-auth/src/user_typ.rs), and the guards that let only a superuser manage a superuser (crates/libs/wms-lib-core/src/model/user.rs:644, :676).
API access	ApiKeyStore::validate (crates/libs/wms-lib-auth/src/authentication/api_key.rs:254).
RF device login	The sign-in route (crates/libs/wms-lib-web/src/handlers/handlers_login.rs:220).
Language, Timezone, Date Format, Theme	The web screens of this user.

Messages

Message	When
User {username} already exists	The login is taken.
Only a superuser can set a user's type to {type}	You are not a superuser and you changed Type. Sending the type the account already has is accepted.
Only a superuser can change or delete the superuser account {id}	You are not a superuser and the account is of type Admin or Sys. The refusal covers save, password change and delete.
Duplicate entry on user (constraint ...)	A unique key other than the login was hit.

See Messages catalogue.

Related pages

• Users list
• Creating a user
• Resetting a password
• Locking or disabling an account
• User types and statuses
• API: create_user, update_user, delete_user, get_user. RF terminal: the switch RF device login decides whether the account may sign in on the handheld.