You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@openoffice.apache.org by "Marcus (OOo)" <ma...@wtnet.de> on 2011/11/13 19:01:21 UTC
How to change the login of AOO BZ instance?
Hi,
when logging in I've to do as "mla@openoffice.org" and when writting
comments the same it displayed as name.
So, how to change this to a real name and not using a mail address?
When changing the mail address from "mla@openoffice.org" to my real one
I don't want to show this to everyone. ;-)
TIA
Marcus
RE: How to change the login of AOO BZ instance?
Posted by "Dennis E. Hamilton" <de...@acm.org>.
Ahah. Yes.
Agreed:
In an issue or issue comment, any link with a BZ User Name
has a mailto: behind it. It will be the *current* e-mail
that the account is set to forward to.
For example, I just changed my forwarding for orcmid@ openoffice.org in the AOO BZ to orcmid@ apache.org, and that is now what the "orcmid" link will open a new e-mail to if the link is followed. If you mouse over the link, you should see that address as well, depending on how your browser does it. And a clip-board copy of the link will bring the e-mail address.
I need to check that the log-in has not actually changed. I think it is the forwarding address that is shown, not the login id. I also think the name on the link might be derived from the full-name field in the account entry.
To change this requires some careful analysis of how BZ handles this and how it might have been warped in having the migration work. The alternative would be to have a profile-based system that provided a mailing form that did not disclose the recipient's e-mail address. I don't know if it is in the Apache DNA (and I hesitantly mention that the Forums do exactly that).
For ASF, it is important to have everything grounded to some concrete identifier. The current approach involves e-mail addresses, where committers are more grounded: there is a definite connection between the Apache User Name/ID and an iCLA. There is also a MailAlias registry where other e-mails used by a committer can be listed (and known to all committers) so that there use can still be recognized as theirs (by manually checking that list, usually).
It is not a perfect system, but apparently good enough. I suspect that, as a policy matter, the forwarding mail associated with a BZ account is as important an identifier as the visible e-mail addresses shown on mailing lists and elsewhere.
I wonder what conversation is needed to modify this. Certainly, the registration process for Bugzilla and other services established at AOO need to inform folks when the e-mail provided as part of a registration or subscription will be made visible. It is important for those who fear scraping of their e-mail addresses for use by spammers, phishers, stalkers, and other undesirables. Each will determine how that risk is to be tolerated or mitigated. (Any ASF Privacy Policy statements should also indicate that there are conditions where an e-mail address is always public.)
For Apache committers, those @apache.org e-mail addresses are public and easily obtained. Having them in convenient mailto: elements on a web page simplifies the work. Still, I think there is no escape.
-----Original Message-----
From: Marcus (OOo) [mailto:marcus.mail@wtnet.de]
Sent: Sunday, November 13, 2011 12:38
To: ooo-dev@incubator.apache.org
Subject: Re: How to change the login of AOO BZ instance?
[ ... ]
Sorry, but you still don't get it. ;-)
When I login in BZ and write comments to issues my full mail address is
shown. When I change my address from "mla@openoffice.org" to a new one,
this new mail address in shown in the comment header in issues and
update mails from BZ.
<example quote>
https://issues.apache.org/ooo/show_bug.cgi?id=118518
orcmid <or...@openoffice.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Issue Type|DEFECT |TASK
--- Comment #1 from orcmid <or...@openoffice.org> 2011-10-17 04:36:20
UTC ---
The issue on legal-discuss is LEGAL-104, at
<https://issues.apache.org/jira/browse/LEGAL-104>.
</example quote>
This is what I want to prevent.
OK, I can change to "marcus@apache.org". But I want to have just an ID
or name or similar but no mail address.
I hope it's now clear. :-)
Marcus
RE: How to change the login of AOO BZ instance?
Posted by "Dennis E. Hamilton" <de...@acm.org>.
I think there are 2.5 conversations here.
1. One is about how the forwarding address on a BZ account is visible on all BZ pages where the account identifier appears as the visible text of a link. That is probably worth a BZ issue (!?) on having that changed. Experts with BZ moxie need to step forward and indicate what is the easiest way to solve that problem.
2. The other is about advising folks whose forwarding address is currently a name@ openoffice.org should change that before the forwarding service is taken down. (I believe this is essential because the password reset procedure uses that forwarding address. I've done it already and I've forgotten what I had to go through.)
2.1 Individuals who have not re-registered using the recovery process need to do so if they intend to ever be able to do so.
2.2 Those who have already done so (or do it now) need to change the e-mail address BZ uses to make notifications if that address is an @openoffice.org address. Also, any address used to make notifications is also publicly visible in the BZ issues associated with that user, and it may be advisable to change the address for privacy reasons as well.
Did I miss anything?
-----Original Message-----
From: Marcus (OOo) [mailto:marcus.mail@wtnet.de]
Sent: Sunday, November 13, 2011 12:38
To: ooo-dev@incubator.apache.org
Subject: Re: How to change the login of AOO BZ instance?
[ ... ]
OK, I can change to "marcus@apache.org". But I want to have just an ID
or name or similar but no mail address.
I hope it's now clear. :-)
Marcus
Re: How to change the login of AOO BZ instance?
Posted by "Marcus (OOo)" <ma...@wtnet.de>.
Am 11/13/2011 08:48 PM, schrieb tj@apache.org:
> On 11/13/2011 13:39, Marcus (OOo) wrote:
>> Am 11/13/2011 07:20 PM, schrieb RGB ES:
>>> 2011/11/13 Marcus (OOo)<ma...@wtnet.de>
>>>
>>>> When changing the mail address from "mla@openoffice.org" to my real
>>>> one I
>>>> don't want to show this to everyone. ;-)
>>>>
>>>>
>>>>
>>> Too late, sorry: this mailing list is public so your real email
>>> address is
>>> already available to everyone ;)
>>
>> No, I meant the new mail address.
>>
>> Marcus
>>
> So did Ricardo. This list (ooo-dev) is public, so the address you use
> here is publicly available. You can use that one in BZ, or use your
> Apache address there (which I did).
Sorry, but you still don't get it. ;-)
When I login in BZ and write comments to issues my full mail address is
shown. When I change my address from "mla@openoffice.org" to a new one,
this new mail address in shown in the comment header in issues and
update mails from BZ.
<example quote>
https://issues.apache.org/ooo/show_bug.cgi?id=118518
orcmid <or...@openoffice.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Issue Type|DEFECT |TASK
--- Comment #1 from orcmid <or...@openoffice.org> 2011-10-17 04:36:20
UTC ---
The issue on legal-discuss is LEGAL-104, at
<https://issues.apache.org/jira/browse/LEGAL-104>.
</example quote>
This is what I want to prevent.
OK, I can change to "marcus@apache.org". But I want to have just an ID
or name or similar but no mail address.
I hope it's now clear. :-)
Marcus
RE: How to change the login of AOO BZ instance?
Posted by "Dennis E. Hamilton" <de...@acm.org>.
The top banner that has your BZ e-mail address and the logout link is not what this discussion is about. Only you see those. So it appearing there is not something that is a privacy matter.
After I first changed my forwarding from @openoffice.org to @apache.org, the logout link and e-mail address had not changed. It is now changed to the @apache.org address.
So, I crossed my fingers and logged out to see what I need to use to log back in.
TJ is absolutely right. The new forwarding address has become my new account identifier.
Someone forgot to notice that there is no problem that can't be solved by an additional level of indirection. There are way too few levels of indirection in the AOO BZ setup. (Sigh).
I assume this fact is not enough for someone to highjack a BZ account, because the password has to be known to change it. And I don't think the reset process works if the e-mail address no longer works.
- Dennis
PS: Meanwhile, I now have a BZ account with an @apache.org e-mail address and a password that I associate with my @openoffice.org account. I will never keep that straight. It is time to generate a different BZ password in my password safe [;<).
-----Original Message-----
From: TJ Frazier [mailto:tjfrazier@cfl.rr.com]
Sent: Sunday, November 13, 2011 13:47
To: ooo-dev@incubator.apache.org
Subject: Re: How to change the login of AOO BZ instance?
Hi, Dennis,
On 11/13/2011 15:14, Dennis E. Hamilton wrote:
[ ... ]
> The confirmation says your log-in has been changed. As far as I know, that is
> not true. Your log-in has not been changed. At least I am still logged in as
> orcmid@ openoffice.org
Our experiences differ here. On any issue I look at, BZ says up at the
top, Log out tj@ apache.org.
> but that is not the address any message to my BZ ID
> will forward to.
>
> If I click on "orcmid" on any of the places where I am listed in a bug report,
> the mail-form that comes up is automatically set with To: orcmid@ apache.org
> now.
>
--
/tj/
Re: How to change the login of AOO BZ instance?
Posted by TJ Frazier <tj...@cfl.rr.com>.
Hi, Dennis,
On 11/13/2011 15:14, Dennis E. Hamilton wrote:
> PS: When you make the change as I described below, you will receive two
> e-mails. One to the old address and one to the new address.
>
> The one to the old address is the one you can ignore to have the change go
> into effect. (This deals with cases where the old address is no longer
> operational.)
>
> The one to the new address requires you to click a confirmation link. At that
> page, you will be asked to enter what the old address was. (Odd, but you must
> enter the old one.)
>
> The confirmation says your log-in has been changed. As far as I know, that is
> not true. Your log-in has not been changed. At least I am still logged in as
> orcmid@ openoffice.org
Our experiences differ here. On any issue I look at, BZ says up at the
top, Log out tj@ apache.org.
> but that is not the address any message to my BZ ID
> will forward to.
>
> If I click on "orcmid" on any of the places where I am listed in a bug report,
> the mail-form that comes up is automatically set with To: orcmid@ apache.org
> now.
>
--
/tj/
RE: How to change the login of AOO BZ instance?
Posted by "Dennis E. Hamilton" <de...@acm.org>.
PS: When you make the change as I described below, you will receive two
e-mails. One to the old address and one to the new address.
The one to the old address is the one you can ignore to have the change go
into effect. (This deals with cases where the old address is no longer
operational.)
The one to the new address requires you to click a confirmation link. At that
page, you will be asked to enter what the old address was. (Odd, but you must
enter the old one.)
The confirmation says your log-in has been changed. As far as I know, that is
not true. Your log-in has not been changed. At least I am still logged in as
orcmid@ openoffice.org but that is not the address any message to my BZ ID
will forward to.
If I click on "orcmid" on any of the places where I am listed in a bug report,
the mail-form that comes up is automatically set with To: orcmid@ apache.org
now.
-----Original Message-----
From: Dennis E. Hamilton [mailto:dennis.hamilton@acm.org]
Sent: Sunday, November 13, 2011 12:04
To: ooo-dev@incubator.apache.org
Subject: RE: How to change the login of AOO BZ instance?
I think there may be some confusion between BZ user IDs and the e-mail that ID
forwards to.
For technical reasons, the original one-word User IDs were replaced by their
corresponding one-word@ openoffice.org e-mail addresses. That address is used
as an identifier and, as far as I know, has nothing to do with the use of that
address for receiving e-mail, forwarding, etc.
If you have re-registered with a previous ID on the new BZ instance, your
profile has a place to specify an actual forwarding e-mail. Be logged in. Go
to Preferences. Go to Account Information. Enter your current Password and
add a New email address. Submit changes.
For committers, an obvious choice is to use your apache-id@ apache.org address
as the New email address.
- Dennis
-----Original Message-----
From: tj@apache.org [mailto:tj@apache.org]
Sent: Sunday, November 13, 2011 11:49
To: ooo-dev@incubator.apache.org
Subject: Re: How to change the login of AOO BZ instance?
On 11/13/2011 13:39, Marcus (OOo) wrote:
> Am 11/13/2011 07:20 PM, schrieb RGB ES:
>> 2011/11/13 Marcus (OOo)<ma...@wtnet.de>
>>
>>> When changing the mail address from "mla@openoffice.org" to my real
>>> one I
>>> don't want to show this to everyone. ;-)
>>>
>>>
>>>
>> Too late, sorry: this mailing list is public so your real email
>> address is
>> already available to everyone ;)
>
> No, I meant the new mail address.
>
> Marcus
>
So did Ricardo. This list (ooo-dev) is public, so the address you use
here is publicly available. You can use that one in BZ, or use your
Apache address there (which I did).
--
/tj/
RE: How to change the login of AOO BZ instance?
Posted by "Dennis E. Hamilton" <de...@acm.org>.
I think there may be some confusion between BZ user IDs and the e-mail that ID
forwards to.
For technical reasons, the original one-word User IDs were replaced by their
corresponding one-word@ openoffice.org e-mail addresses. That address is used
as an identifier and, as far as I know, has nothing to do with the use of that
address for receiving e-mail, forwarding, etc.
If you have re-registered with a previous ID on the new BZ instance, your
profile has a place to specify an actual forwarding e-mail. Be logged in. Go
to Preferences. Go to Account Information. Enter your current Password and
add a New email address. Submit changes.
For committers, an obvious choice is to use your apache-id@ apache.org address
as the New email address.
- Dennis
-----Original Message-----
From: tj@apache.org [mailto:tj@apache.org]
Sent: Sunday, November 13, 2011 11:49
To: ooo-dev@incubator.apache.org
Subject: Re: How to change the login of AOO BZ instance?
On 11/13/2011 13:39, Marcus (OOo) wrote:
> Am 11/13/2011 07:20 PM, schrieb RGB ES:
>> 2011/11/13 Marcus (OOo)<ma...@wtnet.de>
>>
>>> When changing the mail address from "mla@openoffice.org" to my real
>>> one I
>>> don't want to show this to everyone. ;-)
>>>
>>>
>>>
>> Too late, sorry: this mailing list is public so your real email
>> address is
>> already available to everyone ;)
>
> No, I meant the new mail address.
>
> Marcus
>
So did Ricardo. This list (ooo-dev) is public, so the address you use
here is publicly available. You can use that one in BZ, or use your
Apache address there (which I did).
--
/tj/
Re: How to change the login of AOO BZ instance?
Posted by "tj@apache.org" <tj...@apache.org>.
On 11/13/2011 13:39, Marcus (OOo) wrote:
> Am 11/13/2011 07:20 PM, schrieb RGB ES:
>> 2011/11/13 Marcus (OOo)<ma...@wtnet.de>
>>
>>> When changing the mail address from "mla@openoffice.org" to my real
>>> one I
>>> don't want to show this to everyone. ;-)
>>>
>>>
>>>
>> Too late, sorry: this mailing list is public so your real email
>> address is
>> already available to everyone ;)
>
> No, I meant the new mail address.
>
> Marcus
>
So did Ricardo. This list (ooo-dev) is public, so the address you use
here is publicly available. You can use that one in BZ, or use your
Apache address there (which I did).
--
/tj/
Re: How to change the login of AOO BZ instance?
Posted by "Marcus (OOo)" <ma...@wtnet.de>.
Am 11/13/2011 07:20 PM, schrieb RGB ES:
> 2011/11/13 Marcus (OOo)<ma...@wtnet.de>
>
>> When changing the mail address from "mla@openoffice.org" to my real one I
>> don't want to show this to everyone. ;-)
>>
>>
>>
> Too late, sorry: this mailing list is public so your real email address is
> already available to everyone ;)
No, I meant the new mail address.
Marcus
Re: How to change the login of AOO BZ instance?
Posted by RGB ES <rg...@gmail.com>.
2011/11/13 Marcus (OOo) <ma...@wtnet.de>
> When changing the mail address from "mla@openoffice.org" to my real one I
> don't want to show this to everyone. ;-)
>
>
>
Too late, sorry: this mailing list is public so your real email address is
already available to everyone ;)
Cheers
Ricardo