You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@jspwiki.apache.org by "Terry Steichen (JIRA)" <ji...@apache.org> on 2008/05/10 22:27:55 UTC

[jira] Created: (JSPWIKI-267) No consistent means for maintaining a user's unique identity

No consistent means for maintaining a user's unique identity
------------------------------------------------------------

                 Key: JSPWIKI-267
                 URL: https://issues.apache.org/jira/browse/JSPWIKI-267
             Project: JSPWiki
          Issue Type: Bug
          Components: Authentication&Authorization
    Affects Versions: 2.6.2
         Environment: All
            Reporter: Terry Steichen


Now that we've modified JSPWiki to allow users to change not only their Name but also their login name, I don't see any way for JSPWiki administrator to keep track of users over time.  For many reasons of administration, billing, user behavior management, I think there should be some way to unambiguously identify a particular user, no matter how often they may change their profile.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Re: [jira] Created: (JSPWIKI-267) No consistent means for maintaining a user's unique identity

Posted by Murray Altheim <mu...@altheim.com>.
Terry Steichen (JIRA) wrote:
> No consistent means for maintaining a user's unique identity
> ------------------------------------------------------------
> 
>                  Key: JSPWIKI-267
>                  URL: https://issues.apache.org/jira/browse/JSPWIKI-267
>              Project: JSPWiki
>           Issue Type: Bug
>           Components: Authentication&Authorization
>     Affects Versions: 2.6.2
>          Environment: All
>             Reporter: Terry Steichen
> 
> Now that we've modified JSPWiki to allow users to change not only 
> their Name but also their login name, I don't see any way for 
> JSPWiki administrator to keep track of users over time.  For many
> reasons of administration, billing, user behavior management, I
> think there should be some way to unambiguously identify a particular
> user, no matter how often they may change their profile.

I'm pretty sure we don't want to permit people to modify their user
name once they've created it. I haven't looked into how this works
yet, but is there a flag that can be set to disable this "feature"?
If not, I think it would be a good addition -- my guess is that not
too many admins want to permit this since tracking users (especially
problematic ones) becomes immeasureably more difficult.

I'm also with Terry on this -- it's too much of a problem if people
can alter user names. I can easily imagine a bot going to town with
this one... (i.e., it sounds like a really big security hole)

Murray

...........................................................................
Murray Altheim <murray07 at altheim.com>                           ===  = =
http://www.altheim.com/murray/                                     = =  ===
SGML Grease Monkey, Banjo Player, Wantanabe Zen Monk               = =  = =

       Boundless wind and moon - the eye within eyes,
       Inexhaustible heaven and earth - the light beyond light,
       The willow dark, the flower bright - ten thousand houses,
       Knock at any door - there's one who will respond.
                                       -- The Blue Cliff Record

Re: [jira] Closed: (JSPWIKI-267) No consistent means for maintaining a user's unique identity

Posted by Terry Steichen <te...@net-frame.com>.
OK, if that's an existing method, then I have no problem.  The original
comment on this thread led me to understand that such a method didn't
exist.  End of issue.

On Tue, 2008-06-10 at 19:38 +0300, Janne Jalkanen wrote:

> Try UserProfile.getUid().
> 
> /Janne
> 
> On 10 Jun 2008, at 19:28, Terry Steichen wrote:
> 
> > What I am doing is logging activity on my JSPWiki-based system.  It is
> > extremely important that I am able to keep track the activities of a
> > given user.  Prior to adding the capability to change login name, that
> > was pretty straightforward.  Now it isn't (so, what I had to do in the
> > meanwhile was modify JSPWiki so my users cannot change their login
> > name).
> >
> > If the new uid is part of the user profile, it must be accessible (via
> > some api) to allow reliable tracking the activity of any user.  My  
> > point
> > is simply that iff the uid is present but not accessible (via an api -
> > as I understand it is not), then it doesn't provide a complete
> > solution.
> >
> > On the other hand, if the new uid is indeed programmatically  
> > retrievable
> > (without having to write a custom method), then the problem is
> > (presumably) solved.
> >
> >
> > On Tue, 2008-06-10 at 08:51 -0700, Andrew Jaquith wrote:
> >
> >> Terry -- the uid is part of the user profile, and it is stored in the
> >> database. That is the "means" for tracking a unique user. Because  
> >> that
> >> work is complete, I closed the issue.
> >>
> >> Do you have specific suggestions on how to "track"?
> >>
> >> On Jun 10, 2008, at 7:15 AM, Terry Steichen <te...@net-frame.com>  
> >> wrote:
> >>
> >>> Well, then, until we include a means to actually use this unique id,
> >>> the
> >>> problem isn't really fixed, is it?
> >>>
> >>> On Tue, 2008-06-10 at 06:56 -0700, Andrew Jaquith wrote:
> >>>
> >>>> Let me be equally clear: yes, that's right.
> >>>>
> >>>> On Jun 10, 2008, at 3:02 AM, Terry Steichen <te...@net-frame.com>
> >>>> wrote:
> >>>>
> >>>>> Let me be clear - what you're saying is that a unique  
> >>>>> identifier has
> >>>>> been included in version 2.8 to uniquely distinguish a user,
> >>>>> regardless
> >>>>> of changes in name, but no specific method has yet been  
> >>>>> included to
> >>>>> use
> >>>>> it.  Is that correct?
> >>>>>
> >>>>> On Mon, 2008-06-09 at 23:23 -0700, Andrew Jaquith (JIRA) wrote:
> >>>>>
> >>>>>>    [ https://issues.apache.org/jira/browse/JSPWIKI-267? 
> >>>>>> page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
> >>>>>> ]
> >>>>>>
> >>>>>> Andrew Jaquith closed JSPWIKI-267.
> >>>>>> ----------------------------------
> >>>>>>
> >>>>>>      Resolution: Fixed
> >>>>>>   Fix Version/s: 2.8
> >>>>>>
> >>>>>> I added the UID property to user profiles for this purpose in
> >>>>>> 2.7.0-
> >>>>>> svn-29. However, we are not using it strictly speaking for  
> >>>>>> tracking
> >>>>>> just yet. There are probably places in the code where we ought to
> >>>>>> print UserProfile.getUid() to the log file, but that's a future
> >>>>>> thing that we'll do as it makes sense.
> >>>>>>
> >>>>>> In the meantime, this bug is (strictly speaking) fixed.
> >>>>>>
> >>>>>>> No consistent means for maintaining a user's unique identity
> >>>>>>> ------------------------------------------------------------
> >>>>>>>
> >>>>>>>               Key: JSPWIKI-267
> >>>>>>>               URL: https://issues.apache.org/jira/browse/
> >>>>>>> JSPWIKI-267
> >>>>>>>           Project: JSPWiki
> >>>>>>>        Issue Type: Bug
> >>>>>>>        Components: Authentication&Authorization
> >>>>>>>  Affects Versions: 2.6.2
> >>>>>>>       Environment: All
> >>>>>>>          Reporter: Terry Steichen
> >>>>>>>          Assignee: Andrew Jaquith
> >>>>>>>           Fix For: 2.8
> >>>>>>>
> >>>>>>>
> >>>>>>> Now that we've modified JSPWiki to allow users to change not  
> >>>>>>> only
> >>>>>>> their Name but also their login name, I don't see any way for
> >>>>>>> JSPWiki administrator to keep track of users over time.  For  
> >>>>>>> many
> >>>>>>> reasons of administration, billing, user behavior management, I
> >>>>>>> think there should be some way to unambiguously identify a
> >>>>>>> particular user, no matter how often they may change their
> >>>>>>> profile.
> >>>>>>

Re: [jira] Closed: (JSPWIKI-267) No consistent means for maintaining a user's unique identity

Posted by Janne Jalkanen <Ja...@ecyrd.com>.
Try UserProfile.getUid().

/Janne

On 10 Jun 2008, at 19:28, Terry Steichen wrote:

> What I am doing is logging activity on my JSPWiki-based system.  It is
> extremely important that I am able to keep track the activities of a
> given user.  Prior to adding the capability to change login name, that
> was pretty straightforward.  Now it isn't (so, what I had to do in the
> meanwhile was modify JSPWiki so my users cannot change their login
> name).
>
> If the new uid is part of the user profile, it must be accessible (via
> some api) to allow reliable tracking the activity of any user.  My  
> point
> is simply that iff the uid is present but not accessible (via an api -
> as I understand it is not), then it doesn't provide a complete
> solution.
>
> On the other hand, if the new uid is indeed programmatically  
> retrievable
> (without having to write a custom method), then the problem is
> (presumably) solved.
>
>
> On Tue, 2008-06-10 at 08:51 -0700, Andrew Jaquith wrote:
>
>> Terry -- the uid is part of the user profile, and it is stored in the
>> database. That is the "means" for tracking a unique user. Because  
>> that
>> work is complete, I closed the issue.
>>
>> Do you have specific suggestions on how to "track"?
>>
>> On Jun 10, 2008, at 7:15 AM, Terry Steichen <te...@net-frame.com>  
>> wrote:
>>
>>> Well, then, until we include a means to actually use this unique id,
>>> the
>>> problem isn't really fixed, is it?
>>>
>>> On Tue, 2008-06-10 at 06:56 -0700, Andrew Jaquith wrote:
>>>
>>>> Let me be equally clear: yes, that's right.
>>>>
>>>> On Jun 10, 2008, at 3:02 AM, Terry Steichen <te...@net-frame.com>
>>>> wrote:
>>>>
>>>>> Let me be clear - what you're saying is that a unique  
>>>>> identifier has
>>>>> been included in version 2.8 to uniquely distinguish a user,
>>>>> regardless
>>>>> of changes in name, but no specific method has yet been  
>>>>> included to
>>>>> use
>>>>> it.  Is that correct?
>>>>>
>>>>> On Mon, 2008-06-09 at 23:23 -0700, Andrew Jaquith (JIRA) wrote:
>>>>>
>>>>>>    [ https://issues.apache.org/jira/browse/JSPWIKI-267? 
>>>>>> page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
>>>>>> ]
>>>>>>
>>>>>> Andrew Jaquith closed JSPWIKI-267.
>>>>>> ----------------------------------
>>>>>>
>>>>>>      Resolution: Fixed
>>>>>>   Fix Version/s: 2.8
>>>>>>
>>>>>> I added the UID property to user profiles for this purpose in
>>>>>> 2.7.0-
>>>>>> svn-29. However, we are not using it strictly speaking for  
>>>>>> tracking
>>>>>> just yet. There are probably places in the code where we ought to
>>>>>> print UserProfile.getUid() to the log file, but that's a future
>>>>>> thing that we'll do as it makes sense.
>>>>>>
>>>>>> In the meantime, this bug is (strictly speaking) fixed.
>>>>>>
>>>>>>> No consistent means for maintaining a user's unique identity
>>>>>>> ------------------------------------------------------------
>>>>>>>
>>>>>>>               Key: JSPWIKI-267
>>>>>>>               URL: https://issues.apache.org/jira/browse/
>>>>>>> JSPWIKI-267
>>>>>>>           Project: JSPWiki
>>>>>>>        Issue Type: Bug
>>>>>>>        Components: Authentication&Authorization
>>>>>>>  Affects Versions: 2.6.2
>>>>>>>       Environment: All
>>>>>>>          Reporter: Terry Steichen
>>>>>>>          Assignee: Andrew Jaquith
>>>>>>>           Fix For: 2.8
>>>>>>>
>>>>>>>
>>>>>>> Now that we've modified JSPWiki to allow users to change not  
>>>>>>> only
>>>>>>> their Name but also their login name, I don't see any way for
>>>>>>> JSPWiki administrator to keep track of users over time.  For  
>>>>>>> many
>>>>>>> reasons of administration, billing, user behavior management, I
>>>>>>> think there should be some way to unambiguously identify a
>>>>>>> particular user, no matter how often they may change their
>>>>>>> profile.
>>>>>>


Re: [jira] Closed: (JSPWIKI-267) No consistent means for maintaining a user's unique identity

Posted by Terry Steichen <te...@net-frame.com>.
What I am doing is logging activity on my JSPWiki-based system.  It is
extremely important that I am able to keep track the activities of a
given user.  Prior to adding the capability to change login name, that
was pretty straightforward.  Now it isn't (so, what I had to do in the
meanwhile was modify JSPWiki so my users cannot change their login
name).

If the new uid is part of the user profile, it must be accessible (via
some api) to allow reliable tracking the activity of any user.  My point
is simply that iff the uid is present but not accessible (via an api -
as I understand it is not), then it doesn't provide a complete
solution.  

On the other hand, if the new uid is indeed programmatically retrievable
(without having to write a custom method), then the problem is
(presumably) solved.


On Tue, 2008-06-10 at 08:51 -0700, Andrew Jaquith wrote:

> Terry -- the uid is part of the user profile, and it is stored in the  
> database. That is the "means" for tracking a unique user. Because that  
> work is complete, I closed the issue.
> 
> Do you have specific suggestions on how to "track"?
> 
> On Jun 10, 2008, at 7:15 AM, Terry Steichen <te...@net-frame.com> wrote:
> 
> > Well, then, until we include a means to actually use this unique id,  
> > the
> > problem isn't really fixed, is it?
> >
> > On Tue, 2008-06-10 at 06:56 -0700, Andrew Jaquith wrote:
> >
> >> Let me be equally clear: yes, that's right.
> >>
> >> On Jun 10, 2008, at 3:02 AM, Terry Steichen <te...@net-frame.com>  
> >> wrote:
> >>
> >>> Let me be clear - what you're saying is that a unique identifier has
> >>> been included in version 2.8 to uniquely distinguish a user,
> >>> regardless
> >>> of changes in name, but no specific method has yet been included to
> >>> use
> >>> it.  Is that correct?
> >>>
> >>> On Mon, 2008-06-09 at 23:23 -0700, Andrew Jaquith (JIRA) wrote:
> >>>
> >>>>    [ https://issues.apache.org/jira/browse/JSPWIKI-267?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
> >>>> ]
> >>>>
> >>>> Andrew Jaquith closed JSPWIKI-267.
> >>>> ----------------------------------
> >>>>
> >>>>      Resolution: Fixed
> >>>>   Fix Version/s: 2.8
> >>>>
> >>>> I added the UID property to user profiles for this purpose in  
> >>>> 2.7.0-
> >>>> svn-29. However, we are not using it strictly speaking for tracking
> >>>> just yet. There are probably places in the code where we ought to
> >>>> print UserProfile.getUid() to the log file, but that's a future
> >>>> thing that we'll do as it makes sense.
> >>>>
> >>>> In the meantime, this bug is (strictly speaking) fixed.
> >>>>
> >>>>> No consistent means for maintaining a user's unique identity
> >>>>> ------------------------------------------------------------
> >>>>>
> >>>>>               Key: JSPWIKI-267
> >>>>>               URL: https://issues.apache.org/jira/browse/
> >>>>> JSPWIKI-267
> >>>>>           Project: JSPWiki
> >>>>>        Issue Type: Bug
> >>>>>        Components: Authentication&Authorization
> >>>>>  Affects Versions: 2.6.2
> >>>>>       Environment: All
> >>>>>          Reporter: Terry Steichen
> >>>>>          Assignee: Andrew Jaquith
> >>>>>           Fix For: 2.8
> >>>>>
> >>>>>
> >>>>> Now that we've modified JSPWiki to allow users to change not only
> >>>>> their Name but also their login name, I don't see any way for
> >>>>> JSPWiki administrator to keep track of users over time.  For many
> >>>>> reasons of administration, billing, user behavior management, I
> >>>>> think there should be some way to unambiguously identify a
> >>>>> particular user, no matter how often they may change their  
> >>>>> profile.
> >>>>

Re: [jira] Closed: (JSPWIKI-267) No consistent means for maintaining a user's unique identity

Posted by Andrew Jaquith <an...@mac.com>.
Terry -- the uid is part of the user profile, and it is stored in the  
database. That is the "means" for tracking a unique user. Because that  
work is complete, I closed the issue.

Do you have specific suggestions on how to "track"?

On Jun 10, 2008, at 7:15 AM, Terry Steichen <te...@net-frame.com> wrote:

> Well, then, until we include a means to actually use this unique id,  
> the
> problem isn't really fixed, is it?
>
> On Tue, 2008-06-10 at 06:56 -0700, Andrew Jaquith wrote:
>
>> Let me be equally clear: yes, that's right.
>>
>> On Jun 10, 2008, at 3:02 AM, Terry Steichen <te...@net-frame.com>  
>> wrote:
>>
>>> Let me be clear - what you're saying is that a unique identifier has
>>> been included in version 2.8 to uniquely distinguish a user,
>>> regardless
>>> of changes in name, but no specific method has yet been included to
>>> use
>>> it.  Is that correct?
>>>
>>> On Mon, 2008-06-09 at 23:23 -0700, Andrew Jaquith (JIRA) wrote:
>>>
>>>>    [ https://issues.apache.org/jira/browse/JSPWIKI-267?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
>>>> ]
>>>>
>>>> Andrew Jaquith closed JSPWIKI-267.
>>>> ----------------------------------
>>>>
>>>>      Resolution: Fixed
>>>>   Fix Version/s: 2.8
>>>>
>>>> I added the UID property to user profiles for this purpose in  
>>>> 2.7.0-
>>>> svn-29. However, we are not using it strictly speaking for tracking
>>>> just yet. There are probably places in the code where we ought to
>>>> print UserProfile.getUid() to the log file, but that's a future
>>>> thing that we'll do as it makes sense.
>>>>
>>>> In the meantime, this bug is (strictly speaking) fixed.
>>>>
>>>>> No consistent means for maintaining a user's unique identity
>>>>> ------------------------------------------------------------
>>>>>
>>>>>               Key: JSPWIKI-267
>>>>>               URL: https://issues.apache.org/jira/browse/
>>>>> JSPWIKI-267
>>>>>           Project: JSPWiki
>>>>>        Issue Type: Bug
>>>>>        Components: Authentication&Authorization
>>>>>  Affects Versions: 2.6.2
>>>>>       Environment: All
>>>>>          Reporter: Terry Steichen
>>>>>          Assignee: Andrew Jaquith
>>>>>           Fix For: 2.8
>>>>>
>>>>>
>>>>> Now that we've modified JSPWiki to allow users to change not only
>>>>> their Name but also their login name, I don't see any way for
>>>>> JSPWiki administrator to keep track of users over time.  For many
>>>>> reasons of administration, billing, user behavior management, I
>>>>> think there should be some way to unambiguously identify a
>>>>> particular user, no matter how often they may change their  
>>>>> profile.
>>>>

Re: [jira] Closed: (JSPWIKI-267) No consistent means for maintaining a user's unique identity

Posted by Terry Steichen <te...@net-frame.com>.
Well, then, until we include a means to actually use this unique id, the
problem isn't really fixed, is it?

On Tue, 2008-06-10 at 06:56 -0700, Andrew Jaquith wrote:

> Let me be equally clear: yes, that's right.
> 
> On Jun 10, 2008, at 3:02 AM, Terry Steichen <te...@net-frame.com> wrote:
> 
> > Let me be clear - what you're saying is that a unique identifier has
> > been included in version 2.8 to uniquely distinguish a user,  
> > regardless
> > of changes in name, but no specific method has yet been included to  
> > use
> > it.  Is that correct?
> >
> > On Mon, 2008-06-09 at 23:23 -0700, Andrew Jaquith (JIRA) wrote:
> >
> >>     [ https://issues.apache.org/jira/browse/JSPWIKI-267?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel 
> >>  ]
> >>
> >> Andrew Jaquith closed JSPWIKI-267.
> >> ----------------------------------
> >>
> >>       Resolution: Fixed
> >>    Fix Version/s: 2.8
> >>
> >> I added the UID property to user profiles for this purpose in 2.7.0- 
> >> svn-29. However, we are not using it strictly speaking for tracking  
> >> just yet. There are probably places in the code where we ought to  
> >> print UserProfile.getUid() to the log file, but that's a future  
> >> thing that we'll do as it makes sense.
> >>
> >> In the meantime, this bug is (strictly speaking) fixed.
> >>
> >>> No consistent means for maintaining a user's unique identity
> >>> ------------------------------------------------------------
> >>>
> >>>                Key: JSPWIKI-267
> >>>                URL: https://issues.apache.org/jira/browse/ 
> >>> JSPWIKI-267
> >>>            Project: JSPWiki
> >>>         Issue Type: Bug
> >>>         Components: Authentication&Authorization
> >>>   Affects Versions: 2.6.2
> >>>        Environment: All
> >>>           Reporter: Terry Steichen
> >>>           Assignee: Andrew Jaquith
> >>>            Fix For: 2.8
> >>>
> >>>
> >>> Now that we've modified JSPWiki to allow users to change not only  
> >>> their Name but also their login name, I don't see any way for  
> >>> JSPWiki administrator to keep track of users over time.  For many  
> >>> reasons of administration, billing, user behavior management, I  
> >>> think there should be some way to unambiguously identify a  
> >>> particular user, no matter how often they may change their profile.
> >>

Re: [jira] Closed: (JSPWIKI-267) No consistent means for maintaining a user's unique identity

Posted by Andrew Jaquith <an...@mac.com>.
Let me be equally clear: yes, that's right.

On Jun 10, 2008, at 3:02 AM, Terry Steichen <te...@net-frame.com> wrote:

> Let me be clear - what you're saying is that a unique identifier has
> been included in version 2.8 to uniquely distinguish a user,  
> regardless
> of changes in name, but no specific method has yet been included to  
> use
> it.  Is that correct?
>
> On Mon, 2008-06-09 at 23:23 -0700, Andrew Jaquith (JIRA) wrote:
>
>>     [ https://issues.apache.org/jira/browse/JSPWIKI-267?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel 
>>  ]
>>
>> Andrew Jaquith closed JSPWIKI-267.
>> ----------------------------------
>>
>>       Resolution: Fixed
>>    Fix Version/s: 2.8
>>
>> I added the UID property to user profiles for this purpose in 2.7.0- 
>> svn-29. However, we are not using it strictly speaking for tracking  
>> just yet. There are probably places in the code where we ought to  
>> print UserProfile.getUid() to the log file, but that's a future  
>> thing that we'll do as it makes sense.
>>
>> In the meantime, this bug is (strictly speaking) fixed.
>>
>>> No consistent means for maintaining a user's unique identity
>>> ------------------------------------------------------------
>>>
>>>                Key: JSPWIKI-267
>>>                URL: https://issues.apache.org/jira/browse/ 
>>> JSPWIKI-267
>>>            Project: JSPWiki
>>>         Issue Type: Bug
>>>         Components: Authentication&Authorization
>>>   Affects Versions: 2.6.2
>>>        Environment: All
>>>           Reporter: Terry Steichen
>>>           Assignee: Andrew Jaquith
>>>            Fix For: 2.8
>>>
>>>
>>> Now that we've modified JSPWiki to allow users to change not only  
>>> their Name but also their login name, I don't see any way for  
>>> JSPWiki administrator to keep track of users over time.  For many  
>>> reasons of administration, billing, user behavior management, I  
>>> think there should be some way to unambiguously identify a  
>>> particular user, no matter how often they may change their profile.
>>

Re: [jira] Closed: (JSPWIKI-267) No consistent means for maintaining a user's unique identity

Posted by Terry Steichen <te...@net-frame.com>.
Let me be clear - what you're saying is that a unique identifier has
been included in version 2.8 to uniquely distinguish a user, regardless
of changes in name, but no specific method has yet been included to use
it.  Is that correct? 

On Mon, 2008-06-09 at 23:23 -0700, Andrew Jaquith (JIRA) wrote:

>      [ https://issues.apache.org/jira/browse/JSPWIKI-267?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
> 
> Andrew Jaquith closed JSPWIKI-267.
> ----------------------------------
> 
>        Resolution: Fixed
>     Fix Version/s: 2.8
> 
> I added the UID property to user profiles for this purpose in 2.7.0-svn-29. However, we are not using it strictly speaking for tracking just yet. There are probably places in the code where we ought to print UserProfile.getUid() to the log file, but that's a future thing that we'll do as it makes sense.
> 
> In the meantime, this bug is (strictly speaking) fixed.
> 
> > No consistent means for maintaining a user's unique identity
> > ------------------------------------------------------------
> >
> >                 Key: JSPWIKI-267
> >                 URL: https://issues.apache.org/jira/browse/JSPWIKI-267
> >             Project: JSPWiki
> >          Issue Type: Bug
> >          Components: Authentication&Authorization
> >    Affects Versions: 2.6.2
> >         Environment: All
> >            Reporter: Terry Steichen
> >            Assignee: Andrew Jaquith
> >             Fix For: 2.8
> >
> >
> > Now that we've modified JSPWiki to allow users to change not only their Name but also their login name, I don't see any way for JSPWiki administrator to keep track of users over time.  For many reasons of administration, billing, user behavior management, I think there should be some way to unambiguously identify a particular user, no matter how often they may change their profile.
> 

[jira] Closed: (JSPWIKI-267) No consistent means for maintaining a user's unique identity

Posted by "Andrew Jaquith (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/JSPWIKI-267?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Andrew Jaquith closed JSPWIKI-267.
----------------------------------

       Resolution: Fixed
    Fix Version/s: 2.8

I added the UID property to user profiles for this purpose in 2.7.0-svn-29. However, we are not using it strictly speaking for tracking just yet. There are probably places in the code where we ought to print UserProfile.getUid() to the log file, but that's a future thing that we'll do as it makes sense.

In the meantime, this bug is (strictly speaking) fixed.

> No consistent means for maintaining a user's unique identity
> ------------------------------------------------------------
>
>                 Key: JSPWIKI-267
>                 URL: https://issues.apache.org/jira/browse/JSPWIKI-267
>             Project: JSPWiki
>          Issue Type: Bug
>          Components: Authentication&Authorization
>    Affects Versions: 2.6.2
>         Environment: All
>            Reporter: Terry Steichen
>            Assignee: Andrew Jaquith
>             Fix For: 2.8
>
>
> Now that we've modified JSPWiki to allow users to change not only their Name but also their login name, I don't see any way for JSPWiki administrator to keep track of users over time.  For many reasons of administration, billing, user behavior management, I think there should be some way to unambiguously identify a particular user, no matter how often they may change their profile.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Re: [jira] Commented: (JSPWIKI-267) No consistent means for maintaining a user's unique identity

Posted by Janne Jalkanen <Ja...@ecyrd.com>.
OK.  Feel free to close at your discretion ;-)

/Janne

On 9 Jun 2008, at 21:58, Andrew Jaquith wrote:

> That's exactly right. I did add the UID property to user profiles  
> for this purpose. However, we are not using it strictly speaking  
> for tracking just yet. There are probably places in the code where  
> we ought to print UserProfile.getUid() to the log file, but that's  
> a future thing that we'll do as it makes sense.
>
> In the meantime we can close this issue, I think.
>
> On Jun 8, 2008, at 11:39 AM, Janne Jalkanen (JIRA) wrote:
>
>>
>>    [ https://issues.apache.org/jira/browse/JSPWIKI-267? 
>> page=com.atlassian.jira.plugin.system.issuetabpanels:comment- 
>> tabpanel&focusedCommentId=12603389#action_12603389 ]
>>
>> Janne Jalkanen commented on JSPWIKI-267:
>> ----------------------------------------
>>
>> Andrew, didn't you add the UID in 2.7 trunk just for this  
>> purpose?  Can this be closed?
>>
>>> No consistent means for maintaining a user's unique identity
>>> ------------------------------------------------------------
>>>
>>>                Key: JSPWIKI-267
>>>                URL: https://issues.apache.org/jira/browse/ 
>>> JSPWIKI-267
>>>            Project: JSPWiki
>>>         Issue Type: Bug
>>>         Components: Authentication&Authorization
>>>   Affects Versions: 2.6.2
>>>        Environment: All
>>>           Reporter: Terry Steichen
>>>
>>> Now that we've modified JSPWiki to allow users to change not only  
>>> their Name but also their login name, I don't see any way for  
>>> JSPWiki administrator to keep track of users over time.  For many  
>>> reasons of administration, billing, user behavior management, I  
>>> think there should be some way to unambiguously identify a  
>>> particular user, no matter how often they may change their profile.
>>
>> -- 
>> This message is automatically generated by JIRA.
>> -
>> You can reply to this email to add a comment to the issue online.
>>


Re: [jira] Commented: (JSPWIKI-267) No consistent means for maintaining a user's unique identity

Posted by Andrew Jaquith <an...@mac.com>.
That's exactly right. I did add the UID property to user profiles for  
this purpose. However, we are not using it strictly speaking for  
tracking just yet. There are probably places in the code where we  
ought to print UserProfile.getUid() to the log file, but that's a  
future thing that we'll do as it makes sense.

In the meantime we can close this issue, I think.

On Jun 8, 2008, at 11:39 AM, Janne Jalkanen (JIRA) wrote:

>
>    [ https://issues.apache.org/jira/browse/JSPWIKI-267?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12603389 
> #action_12603389 ]
>
> Janne Jalkanen commented on JSPWIKI-267:
> ----------------------------------------
>
> Andrew, didn't you add the UID in 2.7 trunk just for this purpose?   
> Can this be closed?
>
>> No consistent means for maintaining a user's unique identity
>> ------------------------------------------------------------
>>
>>                Key: JSPWIKI-267
>>                URL: https://issues.apache.org/jira/browse/JSPWIKI-267
>>            Project: JSPWiki
>>         Issue Type: Bug
>>         Components: Authentication&Authorization
>>   Affects Versions: 2.6.2
>>        Environment: All
>>           Reporter: Terry Steichen
>>
>> Now that we've modified JSPWiki to allow users to change not only  
>> their Name but also their login name, I don't see any way for  
>> JSPWiki administrator to keep track of users over time.  For many  
>> reasons of administration, billing, user behavior management, I  
>> think there should be some way to unambiguously identify a  
>> particular user, no matter how often they may change their profile.
>
> -- 
> This message is automatically generated by JIRA.
> -
> You can reply to this email to add a comment to the issue online.
>


[jira] Commented: (JSPWIKI-267) No consistent means for maintaining a user's unique identity

Posted by "Janne Jalkanen (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/JSPWIKI-267?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12603389#action_12603389 ] 

Janne Jalkanen commented on JSPWIKI-267:
----------------------------------------

Andrew, didn't you add the UID in 2.7 trunk just for this purpose?  Can this be closed?

> No consistent means for maintaining a user's unique identity
> ------------------------------------------------------------
>
>                 Key: JSPWIKI-267
>                 URL: https://issues.apache.org/jira/browse/JSPWIKI-267
>             Project: JSPWiki
>          Issue Type: Bug
>          Components: Authentication&Authorization
>    Affects Versions: 2.6.2
>         Environment: All
>            Reporter: Terry Steichen
>
> Now that we've modified JSPWiki to allow users to change not only their Name but also their login name, I don't see any way for JSPWiki administrator to keep track of users over time.  For many reasons of administration, billing, user behavior management, I think there should be some way to unambiguously identify a particular user, no matter how often they may change their profile.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.