--- ** [tickets:#7527] Email address associations need better user associations NEEDS MONGO MIGRATION** **Status:** closed **Milestone:** asf_release_1.2.0 **Labels:** sf-2 **Created:** Wed Jul 02, 2014 09:08 PM UTC by Dave Brondsema **Last Updated:** Thu Aug 28, 2014 08:28 PM UTC **Owner:** Alexander Luberg A user can claim any address and even if they don't verify it, that still blocks someone else from trying to claim it. This can be fixed in auth.py like: ~~~~ ::diff - if M.EmailAddress.query.get(_id=new_addr['addr']): + if M.EmailAddress.query.get(_id=new_addr['addr'], confirmed=True): ~~~~ However this leads to another problem, if multiple users have the same email address claimed (but not verified). One user sees a "verify" link, but the other sees "Unknown addr obj [email protected]", on the preferences page. There probably are more issues when it gets to verification, too. --- Sent from forge-allura.apache.org because [email protected] is subscribed to https://forge-allura.apache.org/p/allura/tickets/ To unsubscribe from further messages, a project admin can change settings at https://forge-allura.apache.org/p/allura/admin/tickets/options. Or, if this is a mailing list, you can unsubscribe from the mailing list.
