[allura:tickets] #7527 Email address associations need better user associations NEEDS MONGO MIGRATION

[Dave Brondsema <br...@users.sf.net>]

- **summary**: Email address associations need better user associations --> Email address associations need better user associations NEEDS MONGO MIGRATION
- **status**: code-review --> closed



---

** [tickets:#7527] Email address associations need better user associations NEEDS MONGO MIGRATION**

**Status:** closed
**Milestone:** forge-aug-22
**Created:** Wed Jul 02, 2014 09:08 PM UTC by Dave Brondsema
**Last Updated:** Wed Aug 27, 2014 03:57 AM UTC
**Owner:** Alexander Luberg

A user can claim any address and even if they don't verify it, that still blocks someone else from trying to claim it.  This can be fixed in auth.py like:

~~~~
::diff
-                if M.EmailAddress.query.get(_id=new_addr['addr']):
+                if M.EmailAddress.query.get(_id=new_addr['addr'], confirmed=True):
~~~~

However this leads to another problem, if multiple users have the same email address claimed (but not verified).  One user sees a "verify" link, but the other sees "Unknown addr obj foo@bar.com", on the preferences page.

There probably are more issues when it gets to verification, too.


---

Sent from sourceforge.net because dev@allura.apache.org is subscribed to https://sourceforge.net/p/allura/tickets/

To unsubscribe from further messages, a project admin can change settings at https://sourceforge.net/p/allura/admin/tickets/options.  Or, if this is a mailing list, you can unsubscribe from the mailing list.