On 8/21/06, Mimi Yin <[EMAIL PROTECTED]> wrote:

I think I see where the disconnect is. I'm assuming that it would be
possible to do something like, allow sharees to access shares with
just a plain English URL

osaf.us/bcm/calendar/read-write

But we wouldn't want to do this, because this is just way too easy to
guess.

heh, right.

But from your perspective, this would be a public share? and not
something we support today, correct?

yes.

(I can see how from an implementation perspective, there is a clear
divide between this and an URL with an embedded ticket. However, from
the user's perspective, it's more a matter of degree. An URL with an
embedded ticket is just the same as a public URL that's harder to
guess.

point taken.

The extra layer of security we're offering here...is a security
measure (password) that is de-coupled from the link you click on to
access the share.

yeah, ok, i'm fine with the proposal now.
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

Open Source Applications Foundation "Design" mailing list
http://lists.osafoundation.org/mailman/listinfo/design

Reply via email to