User Management

Overview

Wecode provides a comprehensive user management system with role-based access control, bulk user creation, and trial account management.

User Roles

Wecode supports five distinct user roles with different permission levels:

Admin

Full system access, can manage all users, assignments, and problems

Head Instructor

Can create assignments, manage classes, and create instructor/student accounts

Instructor

Can create assignments and student accounts within their classes

Student

Can submit solutions and view personal submissions

Guest

Limited access, cannot make submissions

User Model

The User model includes the following key fields:

User.php:27-29

protected $fillable = [
    'username', 'email', 'password', 'display_name', 'role_id', 'trial_time'
];

Relationships

User.php:55-74

public function role(){
    return $this->belongsTo('App\Models\Role');
}

function submissions()
{
    return $this->hasMany('App\Models\Submission');
}

function problems(){
    return $this->hasMany(Problem::class);
}

function lops(){
    return $this->belongsToMany('App\Models\Lop');
}

function selected_assignment(){
    return $this->belongsTo('App\Models\Assignment', 'selected_assignment_id');
}

Creating Users

Single User Creation

Admins can create individual users through the web interface. Route: POST /users

UserController.php:178-193

public function store(Request $request)
{
    if(Auth::user()->role->name != 'admin'){
        abort(403);
    }
    $user=new User;
    $user->username=$request->username;
    $user->password=Hash::make($request->password);
    $user->display_name=$request->username;
    $user->email=$request->email;
    if ($request->role_id!="")
        $user->role_id=$request->role_id;
    else $user->role_id=4;
    $user->save();
    return redirect('users');
}

Bulk User Creation

Create multiple users at once using CSV format. Route: GET /users/add_multiple

CSV Format
Implementation

username, email, password, role, display_name
student1, [email protected], random[8], student, John Doe
student2, [email protected], mypassword, student, Jane Smith
instructor1, [email protected], random[12], instructor, Prof. Anderson

UserController.php:420-478

public function add_users($text, $send_mail, $delay)
{
    if( ! in_array( Auth::user()->role->name, ['admin', 'head_instructor', 'instructor'])){
        abort(403);
    }
    $lines = preg_split('/\r?\n|\n?\r/', $text);
    
    $users_ok = [];
    $users_error = [];
    
    $role_name_to_id = Role::all()->pluck('id', 'name');
    $role_id_to_name = Role::all()->pluck('name', 'id');

    foreach ($lines as $line)
    {
        $line = trim($line);

        if (strlen($line) == 0 OR $line[0] == '#')
            continue; //ignore comments and empty lines

        $parts = preg_split('/\s*,\s*/', $line);
        if (count($parts) != 5)
            continue; //ignore lines that not contain 5 parts

        if (strtolower(substr($parts[2], 0, 6)) == 'random')
        {
            // generate random password
            $len = trim(substr($parts[2], 6), '[]');
            if (is_numeric($len)){
                $parts[2] = substr(md5(rand()),0,$len);
            }
        }
        // ... validation and user creation
    }
    
    return ['users_ok'=>$users_ok,'users_error'=>$users_error];
}

Use random[N] in the password field to generate a random password of N characters.

User Permissions

Permission Hierarchy

UserController.php:383-406

// Check permissions
// admin can create any user
// head_instructor can create instructor and student
// instructor can create student
if (Auth::user()->role->name == 'admin'){
    //nothing to be done, admin do whatever he wants
} 
elseif (Auth::user()->role->name == 'head_instructor'){
    if (!in_array($role_name, ['instructor', 'student']))
    {
        array_push($json, 'you can add user with role "instructor" or "student" only');
    }
}
elseif (Auth::user()->role->name == 'instructor'){
    if (!in_array($role_name, [ 'student']))
    {
        array_push($json, 'you can add user with role "student" only');
    }
}
else {
    array_push($json, 'you do not have permission to add user');
}

Trial Accounts

Manage temporary student access with automatic expiration.

Setting Trial Time

Route: POST /users/set_trial

By Duration
By End Date

UserController.php:495-497

if ($request->get('set_choice') == 'new_time'){
    $count = $where_clause->update(['trial_time' => $request->get('new_trial_time') , 'role_id' => 4]);
}

Set trial duration in hours from account creation.

UserController.php:498-505

else {
    $zone = Carbon::now()->getTimezone();
    $end_time = strval((new Carbon($request->get('new_trial_end_time') . ' ' . Setting::get('timezone')))->setTimezone($zone));
    
    $count = $where_clause->update([
        'trial_time' => DB::Raw(" TIMESTAMPDIFF(HOUR, `created_at`, '$end_time' )"),
        'role_id' => 4
    ]);
}

Set trial to expire at a specific date/time.

Automatic Expiration

Trial accounts automatically convert to guest accounts when expired:

Assignment.php:106-113

if (
    $user->trial_time &&
    in_array($user->role->name, ["student"]) &&
    $user->created_at->addHours($user->trial_time) <= Carbon::now()
) {
    $user->role_id = 5; //5 means guest
    $user->save();
}

User Management Routes

All User Routes

Method	Route	Action	Permission
GET	`/users`	List all users	admin, head_instructor
GET	`/users/create`	Show create form	admin
POST	`/users`	Create user	admin
GET	`/users/{id}`	Show user profile	admin, head_instructor, instructor, self
GET	`/users/{id}/edit`	Show edit form	admin, self
PUT	`/users/{id}`	Update user	admin, self
DELETE	`/users/{id}`	Delete user	admin
GET	`/users/add_multiple`	Bulk add form	admin, head_instructor, instructor
POST	`/users/adds`	Process bulk add	admin, head_instructor, instructor
POST	`/users/set_trial`	Set trial time	admin, head_instructor, instructor
GET	`/users/ranking`	User rankings	authenticated
POST	`/users/delete_submissions/{user}`	Delete user submissions	admin

User Statistics

View detailed user statistics and submission history:

UserController.php:55-121

public function show($id)
{
    if ( ! in_array( Auth::user()->role->name, ['admin', 'head_instructor', 'instructor']))
        if (Auth::user()->id != $id)
            abort(403);
    $user = User::with('lops')->findOrFail($id);
    $subs = $user->submissions()->with('assignment', 'assignment.lops', 'assignment.problems')->get();

    $total = $subs->count();
    $problem_wise_stat = array();
    $total_accept = 0;
    $solved_problems = array();
    $ass = array();
    
    // Calculate statistics per assignment
    foreach ($subs as $sub){
        $t = $ass[$sub->assignment->id] ??= (object)null;
        $t->ass ??= $sub->assignment;
        $t->total ??= 0;
        $t->accept ??= 0;
        $t->score ??= 0;
        $t->ac_score ??= 0;
        $t->solved ??= 0;
        
        // ... statistics calculation
    }
    
    return view('users.show', ['user' => $user, 'ass' => $ass, 'stat' => $statistics]);
}

Best Practices

Security

Always hash passwords with Hash::make()
Validate email uniqueness
Enforce minimum password length (8 characters)
Use role-based access control

Trial Accounts

Set appropriate trial duration
Monitor trial expiration
Communicate expiration to users
Have upgrade process ready

Bulk Creation

Use CSV format for consistency
Generate random passwords for security
Validate all user data before creation
Review error reports after bulk import

User Management

Regular cleanup of guest accounts
Monitor user submission activity
Maintain class enrollment
Backup user data regularly

Getting Started

Core Features

Advanced Features

Configuration

User Guides

User Management

Overview

User Roles

Admin

Head Instructor

Instructor

Student

Guest

User Model

Relationships

Creating Users

Single User Creation

Bulk User Creation

User Permissions

Permission Hierarchy

Trial Accounts

Setting Trial Time

Automatic Expiration

User Management Routes

User Statistics

Best Practices

Security

Trial Accounts

Bulk Creation

User Management

Build docs developers (and LLMs) love

Getting Started

Core Features

Advanced Features

Configuration

User Guides

​Overview

​User Roles

Admin

Head Instructor

Instructor

Student

Guest

​User Model

​Relationships

​Creating Users

​Single User Creation

​Bulk User Creation

​User Permissions

​Permission Hierarchy

​Trial Accounts

​Setting Trial Time

​Automatic Expiration

​User Management Routes

​User Statistics

​Best Practices

Security

Trial Accounts

Bulk Creation

User Management

Build docs developers (and LLMs) love

Overview

User Roles

User Model

Relationships

Creating Users

Single User Creation

Bulk User Creation

User Permissions

Permission Hierarchy

Trial Accounts

Setting Trial Time

Automatic Expiration

User Management Routes

User Statistics

Best Practices