---
** [tickets:#7527] Email address associations need better user associations**
**Status:** open
**Milestone:** forge-jul-25
**Created:** Wed Jul 02, 2014 09:08 PM UTC by Dave Brondsema
**Last Updated:** Wed Jul 02, 2014 09:08 PM UTC
**Owner:** nobody
A user can claim any address and even if they don't verify it, that still
blocks someone else from trying to claim it. This can be fixed in auth.py like:
~~~~
::diff
- if M.EmailAddress.query.get(_id=new_addr['addr']):
+ if M.EmailAddress.query.get(_id=new_addr['addr'],
confirmed=True):
~~~~
However this leads to another problem, if multiple users have the same email
address claimed (but not verified). One user sees a "verify" link, but the
other sees "Unknown addr obj [email protected]", on the preferences page.
There probably are more issues when it gets to verification, too.
---
Sent from sourceforge.net because [email protected] is subscribed to
https://sourceforge.net/p/allura/tickets/
To unsubscribe from further messages, a project admin can change settings at
https://sourceforge.net/p/allura/admin/tickets/options. Or, if this is a
mailing list, you can unsubscribe from the mailing list.
