[feature-proposal] Forgot password improvements

[Bráulio Bhavamitra]

On Wed, Nov 13, 2013 at 5:58 PM, Rodrigo Souto <rodrigo at colivre.coop.br>wrote:

> Ok, I try to summarize the proposal so that we can decide (after all we
> still have a feature to develop). I tried to list them as simple as
> possible with the counter arguments to each one as simple as possible
> too. If I missed anything please add it.
>
> [rodrigo]: Select for the user to choose which field he wants to use as
>            confirmation. This solution was considered to have a poor
>            user interface.
>
> [daniel]: No select field and only the text field, with the available
>           fields as label, which automatic searches through every field.
>           This solution was susceptible to conflict (match 2 or more
>           users).
>
> [ewout]: Same as daniel, considering that the usability gain is worth
>          the extra email sent to users that didn't asked to. This was
>          considered to be unfriendly to the user that receives an email
>          without asking.
>
> [hugo]: Same as daniel, but dealing with the conflict by showing the
>         user the matched users for him to choose which one is him. This
>         was considered to have information leakage.
>
> [aurium]: Same as daniel, but the admin defines which fields would be
>           searched for. This was considered bas since the admin would
>           like to allow every field that is defined by the enabled
>           plugins.
>
> Was also proposed captcha and rate-limit solutions but these would not
> fit in the available resources for the feature.
>
To use the captcha isn't the just rendering an existing partial? This was
already implemented for comments. This would be make the Hugo proposal
feasible.

Rate-limit is something really new and somehow complicated...

>
> For the sake of decision, I recommend we use the Shulze method, that is
> just list the proposals in the order you like the most, as reference of
> relevance of each proposal and the final decision goes to me and Ewout,
> as developer and client, to reach a consensus.
>
> Regardless all the suffering, troubles and possible bikeshedding, at
> least this might as well serve as a small experiment of feature future
> decisions on the list.
> --
> Rodrigo Souto <rodrigo at colivre.coop.br> :: 55 71 8131-7714
> Colivre - Cooperativa de Tecnologias Livres
> http://www.colivre.coop.br/
>
> _______________________________________________
> Noosfero-dev mailing list
> Noosfero-dev at listas.softwarelivre.org
> http://listas.softwarelivre.org/cgi-bin/mailman/listinfo/noosfero-dev
>
>


-- 
"Lute pela sua ideologia. Seja um com sua ideologia. Viva pela sua
ideologia. Morra por sua ideologia" P.R. Sarkar

EITA - Educação, Informação e Tecnologias para Autogestão
http://cirandas.net/brauliobo
http://eita.org.br

"Paramapurusha é meu pai e Parama Prakriti é minha mãe. O universo é meu
lar e todos nós somos cidadãos deste cosmo. Este universo é a imaginação da
Mente Macrocósmica, e todas as entidades estão sendo criadas, preservadas e
destruídas nas fases de extroversão e introversão do fluxo imaginativo
cósmico. No âmbito pessoal, quando uma pessoa imagina algo em sua mente,
naquele momento, essa pessoa é a única proprietária daquilo que ela
imagina, e ninguém mais. Quando um ser humano criado mentalmente caminha
por um milharal também imaginado, a pessoa imaginada não é a propriedade
desse milharal, pois ele pertence ao indivíduo que o está imaginando. Este
universo foi criado na imaginação de Brahma, a Entidade Suprema, por isso
a propriedade deste universo é de Brahma, e não dos microcosmos que também
foram criados pela imaginação de Brahma. Nenhuma propriedade deste mundo,
mutável ou imutável, pertence a um indivíduo em particular; tudo é o
patrimônio comum de todos."
Restante do texto em
http://cirandas.net/brauliobo/blog/a-problematica-de-hoje-em-dia
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listas.softwarelivre.org/pipermail/noosfero-dev/attachments/20131120/ca01b8b3/attachment.html>