Admin and disabled flags for users

Summary:
Provide an "isAdmin" flag for users, to designate administrative users.

Restore the account editing interface and allow it to set role flags and reset
passwords.

Provide an "isDisabled" flag for users and shut down all system access for them.

Test Plan:
Created "admin" and "disabled" users. Did administrative things with the admin
user. Tried to do stuff with the disabled user and was rebuffed. Tried to access
administrative interfaces with a normal non-admin user and was denied.

Reviewed By: aran
Reviewers: tuomaspelkonen, jungejason, aran
CC: ccheever, aran
Differential Revision: 278

src/applications/auth/controller/disabled/PhabricatorDisabledUserController.php

@@ -0,0 +1,43 @@
+<?php
+
+/*
+ * Copyright 2011 Facebook, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+class PhabricatorDisabledUserController extends PhabricatorAuthController {
+
+  public function shouldRequireEnabledUser() {
+    return false;
+  }
+
+  public function processRequest() {
+    $request = $this->getRequest();
+    $user = $request->getUser();
+    if (!$user->getIsDisabled()) {
+      return new Aphront404Response();
+    }
+
+    $failure_view = new AphrontRequestFailureView();
+    $failure_view->setHeader('Account Disabled');
+    $failure_view->appendChild('<p>Your account has been disabled.</p>');
+
+    return $this->buildStandardPageResponse(
+      $failure_view,
+      array(
+        'title' => 'Account Disabled',
+      ));
+  }
+
+}

src/applications/auth/controller/disabled/__init__.php

@@ -0,0 +1,14 @@
+<?php
+/**
+ * This file is automatically generated. Lint this module to rebuild it.
+ * @generated
+ */
+
+
+
+phutil_require_module('phabricator', 'aphront/response/404');
+phutil_require_module('phabricator', 'applications/auth/controller/base');
+phutil_require_module('phabricator', 'view/page/failure');
+
+
+phutil_require_source('PhabricatorDisabledUserController.php');

src/applications/auth/controller/logout/PhabricatorLogoutController.php

@@ -22,6 +22,11 @@ class PhabricatorLogoutController extends PhabricatorAuthController {
     return true;
   }
 
+  public function shouldRequireEnabledUser() {
+    // Allow disabled users to logout.
+    return false;
+  }
+
   public function processRequest() {
     $request = $this->getRequest();