- **status**: in-progress --> code-review - **Comment**: allura:al/7527
--- ** [tickets:#7527] Email address associations need better user associations** **Status:** code-review **Milestone:** forge-jul-25 **Created:** Wed Jul 02, 2014 09:08 PM UTC by Dave Brondsema **Last Updated:** Thu Jul 17, 2014 09:51 PM UTC **Owner:** Alexander Luberg A user can claim any address and even if they don't verify it, that still blocks someone else from trying to claim it. This can be fixed in auth.py like: ~~~~ ::diff - if M.EmailAddress.query.get(_id=new_addr['addr']): + if M.EmailAddress.query.get(_id=new_addr['addr'], confirmed=True): ~~~~ However this leads to another problem, if multiple users have the same email address claimed (but not verified). One user sees a "verify" link, but the other sees "Unknown addr obj [email protected]", on the preferences page. There probably are more issues when it gets to verification, too. --- Sent from sourceforge.net because [email protected] is subscribed to https://sourceforge.net/p/allura/tickets/ To unsubscribe from further messages, a project admin can change settings at https://sourceforge.net/p/allura/admin/tickets/options. Or, if this is a mailing list, you can unsubscribe from the mailing list.
