There is an option in the ticket view of a collection to "add to your
account" (in the mockups it's a plus sign next to the collection name).
When users clicks on this icon, they are presented with a small login
dialog which when submitted will add the collection to their account as
a subscription, and log them right into the app.
There is a "Sign up for a Cosmo account" link on the dialog for people
who don't already have an account to create one. Clicking that link will
bring up the account-creation dialog box (same as the one from the main
Cosmo login page).
When e-mail activation for new accounts is turned on (i.e., the user has
to respond to an e-mail to activate the account) this creates a small
dilemma in that the user is creating the account as an incidental step
in "adding the collection" -- but with the account is not actually
activated, the current security model will not allow adding a subscription.
It seems like we have two choices:
1. Change the security model to allow subscriptions to be added to
unactivated accounts. This is arguably less secure than what we have
now, although I wonder what practical problems it actually presents
(i.e., malicious people could add lots of subscriptions for an
un-activated account).
2. Force end-users in this situation to activate their accounts from the
e-mail message, and the start the process over from the first step,
clicking on the plus sign next to the collection name to add the collection.
Obviously the ideal option from the user's perspective is just to allow
them to create their account and have the new subscription waiting for
them when they first log in after activating the account through e-mail,
but I see where this has security implications we need to consider.
If we go with option 2, then at bare minimum we might consider changing
the actual activation process so that the user ends back up in the
original collection viewing by ticket, rather than at the generic login
page.
Thoughts?
Matthew
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
Open Source Applications Foundation "Design" mailing list
http://lists.osafoundation.org/mailman/listinfo/design
