Mailing-List: contact bloodhound-dev-help@incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: bloodhound-dev@incubator.apache.org
Received-SPF: pass (nike.apache.org: domain of gary.martin@wandisco.com
 designates 209.85.216.178 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <0c1801cde939$560813b0$02183b10$@16degrees.com.au>
References: <084801cde6ea$9ac63870$d052a950$@16degrees.com.au>
	<50E0DCD6.8030203@wandisco.com>
	<CAGMZAuNqkF9oGndd+kZz-eRjVBPJCSqg-oHvuBZLu4HGMOMxSw@mail.gmail.com>
	<50E1628C.4050503@wandisco.com>
	<8BFA87FB-AA1F-4C3A-B6CF-CB1E667DD94E@wandisco.com>
	<CAGMZAuNr80mGJ1RoKzcc_Ta4eocKdOFK-N692Y76x9xks7AifQ@mail.gmail.com>
	<50E2AFB3.8000302@wandisco.com>
	<CAGMZAuNaJAApP8EnNz4AdPwoKdFXvtZh-XLR0=mmrnMzeaQHWA@mail.gmail.com>
	<CAJSKAsg4tDBE0XL5sKxhLvVBbr2GtqA+nyKVmFQ746frkqmAWg@mail.gmail.com>
	<0c1601cde936$fa8f8d30$efaea790$@16degrees.com.au>
	<0c1801cde939$560813b0$02183b10$@16degrees.com.au>
Date: Thu, 3 Jan 2013 00:40:26 +0000
Message-ID: 
 <CAEZ-ge6Q442D86b9Lre=k_1uZEtLBSQuzYVch++tiaJLpAUeXQ@mail.gmail.com>
Subject: Re: Acct creation?
From: Gary Martin <gary.martin@wandisco.com>
To: bloodhound-dev@incubator.apache.org, gavin@16degrees.com.au
Content-Type: multipart/alternative; boundary=047d7b6d9b1ef1e80204d2579b92

--047d7b6d9b1ef1e80204d2579b92
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On 2 January 2013 22:34, Gavin McDonald <gavin@16degrees.com.au> wrote:

>
>
> > -----Original Message-----
> > From: Gavin McDonald [mailto:gavin@16degrees.com.au]
> > Sent: Thursday, 3 January 2013 8:48 AM
> > To: bloodhound-dev@incubator.apache.org
> > Subject: RE: Acct creation?
> >
> >
> >
> > > -----Original Message-----
> > > From: Peter Ko=C5=BEelj [mailto:peter@digiverse.si]
> > > Sent: Wednesday, 2 January 2013 5:11 PM
> > > To: bloodhound-dev@incubator.apache.org
> > > Subject: Re: Acct creation?
> > >
> > > > > So, if you want to keep it, you have to, IMO, do the following:
> > > > >
> > > > >   * do not duplicate in Apps what's accessible from one of the
> > > > >     navigation bars
> > > > >   * do not leave in Apps important links (such as, e.g., Register=
)
> > > > >   * do not call it Apps; I suppose, once the previous two
> > > > > conditions
> > are
> > > > >     met, the heading could be called "Plugins" or "Tools" or some
> > > > >     similar, more obvious name.
> > > > >
> > > >
> > > > I agree , especially with (2) .
> > > >
> > > >
> > > I agree with all of the above as well so I took the liberty to open a
> > > ticket: https://issues.apache.org/bloodhound/ticket/321
> >
> > As the instigator to this thread I need to follow up.
> >
> > I did indeed find 'Register' under the apps drop down menu.
> > I registered fine so thanks.
> >
> > A few points.
> >
> > 1) no email validation or captcha was required, that's a spam target.
>
> Ok this one I did get an email asking for verification, by this time thou=
gh
> an
> acct is already created and I was allowed to login beforehand.
>
> Perhaps the email + token verification should happen before being allowed
> to login for the first time?
>

At the moment our site is set up so that additional permissions have to be
granted by an admin user to allow for any kind of editing. Perhaps this
sets the bar too high but any user can make the request them on this
mailing list.

However, the fact that you have to login to get an email sent for the
verification can certainly be confusing and so I would not mind that being
changed.


> Gav...
>
> >
> > 2) I agree 'Login' link at top of page should be Login/Register with a
> link on
> > the Login page to register.
>

Yeah, sounds good to me.

> 3) Delete Account ? Really? - What happens to tickets assigned and/or
> > created by a user if he can delete his/her own acct?
> >    Personally I think that should be removed and placed in admin hands
> only.
>

Perhaps I am missing the problem.. tickets associated with such a user as
reporter, assignee, commenter and so on will retain the specified username.
I can't think of any huge issue around this at the moment but perhaps I am
too tired at the moment to work out all the problems. The only problem I
can think of right now is that old usernames might be reclaimable so that
another user could pretend to be the previous owner of a username. So
perhaps it would be better if usernames could not be reused unless an admin
user creates an account.

Cheers,
    Gary

--047d7b6d9b1ef1e80204d2579b92--