Disallow users from making requests until first/last name are filled in

[matthew-li]

CILogon is given first/last name information by the identity provider chosen by the user. In rare cases, the provider doesn't give one or the other of the names, so we have incomplete information.

In cases like these, users should be prevented from making most (all?) requests (especially requests to join/be added to a project and, by extension, gain access to the cluster) until they fill in both first/last names from the user profile page.

We already have checks for whether the user agreement is signed. Consider including checks like these in some kind of utility function/mixin to avoid code duplication.

It might also be useful to include a banner upon initial authentication alerting the user to do this.

[matthew-li]

@helbashandy I think this would make a simple first issue to let you see/touch much of the codebase.

Most views in coldfront.core inherit a mixin UserPassesTestMixin which requires a function test_func that determines whether the authenticated user can access the view (else 403).

It's probably worth considering placing checks like these (agreement being signed, names being filled, etc.) into a new mixin to avoid duplicate code.

I also want to document which views require what. Whether that belongs only in the code or has a place in our separate docs repo is a conversation for us to have.

[matthew-li]

@helbashandy Some additional relevant views:

• Project PIs/managers can add users to their project directly (as opposed to users requesting to join): coldfront.core.project.views.ProjectAddUsersView.
• A user could navigate directly to the URLs linked to from the "Create a Project" view (e.g., if a user support consultant provides them with one of the those links). See coldfront.core.project.templates.project.project_request.project_request.html. Those landing pages themselves then link to the forms where the requests are actually made.
• PIs/managers of FCAs (on MyBRC) and PCAs (on MyLRC) can request to renew their allowances:
  • From the project detail page: "Renew Allowance" button
  • At /project: These users see an additional "Renew a PI's Allowance" button. You'd need to log in as a relevant user to see that.