Yes, outside-the-OAE-UX deletion of user accounts has similar problems 
and also needs dealing with. Two related factors make World 
(SimpleGroup/Course/Research Project) deletion a more pressing issue, 
though:

* In our real-world production environments, normal OAE users generally 
have far more freedom to create (and re-create) Worlds than to create 
new user accounts.

* The OAE UX currently presents normal users with a way to (apparently) 
delete Worlds. Through that UX, we implicitly promise our campus 
community that our software can handle World deletion in some sanely 
explainable fashion. We now know that promise is dangerously misleading, 
and so we have a duty to rectify our mistake.

Best,
Ray

On 7/15/12 7:56 PM, Roma, David wrote:
> On a side note, I think a similar issue also occurs for users. If I delete a 
> user with curl, and re-create user with same userid weirdness results. They 
> lose all memberships, their privacy settings change to public, but they still 
> have some access to content, didn't do full testing, but it certainly makes 
> for some strange results..
>
> Dave.
>
> -----Original Message-----
> From: oae-dev-boun...@collab.sakaiproject.org 
> [mailto:oae-dev-boun...@collab.sakaiproject.org] On Behalf Of Scot Hacker
> Sent: Saturday, 14 July 2012 7:07 AM
> To: OAE dev list
> Subject: Re: [oae-dev] Deleting Worlds
>
>
> On Jul 13, 2012, at 11:01 AM, Nate Angell wrote:
>
>> Am I correct in interpreting that the brokenness really manifests itself 
>> only when a new world is created that has the same id as a deleted world?
>
> That's the circumstance I found it in - tried to delete and re-create a world 
> with the same name, was surprised to see all my old content still there. Then 
> tried it across user accounts and encountered the real security 
> ramifications. Can't guarantee it doesn't crop up in other situations, but 
> this is the most likely "accidental" scenario.
>
> ./s
>
> __________________________
> Scot Hacker
> Senior Software Developer @ CalCentral
> Educational Technology Services, UC Berkeley
>
> shac...@berkeley.edu
> (510) 292-5586
> __________________________
>
>
>
>
>
>
>
> _______________________________________________
> oae-dev mailing list
> oae-dev@collab.sakaiproject.org
> http://collab.sakaiproject.org/mailman/listinfo/oae-dev
> Charles Sturt University
>
> | ALBURY-WODONGA | BATHURST | CANBERRA | DUBBO | GOULBURN | MELBOURNE | 
> ONTARIO | ORANGE | PORT MACQUARIE | SYDNEY | WAGGA WAGGA |
>
> LEGAL NOTICE
> This email (and any attachment) is confidential and is intended for the use 
> of the addressee(s) only. If you are not the intended recipient of this 
> email, you must not copy, distribute, take any action in reliance on it or 
> disclose it to anyone. Any confidentiality is not waived or lost by reason of 
> mistaken delivery. Email should be checked for viruses and defects before 
> opening. Charles Sturt University (CSU) does not accept liability for viruses 
> or any consequence which arise as a result of this email transmission. Email 
> communications with CSU may be subject to automated email filtering, which 
> could result in the delay or deletion of a legitimate email before it is read 
> at CSU. The views expressed in this email are not necessarily those of CSU.
>
> Charles Sturt University in Australia  http://www.csu.edu.au  The 
> Chancellery, Panorama Avenue, Bathurst NSW Australia 2795  ABN: 83 878 708 
> 551; CRICOS Provider Numbers: 00005F (NSW), 01947G (VIC), 02960B (ACT)
>
> Charles Sturt University in Ontario  http://www.charlessturt.ca 860 
> Harrington Court, Burlington Ontario Canada L7N 3N4  Registration: 
> www.peqab.ca
>
> Consider the environment before printing this email.
> _______________________________________________
> oae-dev mailing list
> oae-dev@collab.sakaiproject.org
> http://collab.sakaiproject.org/mailman/listinfo/oae-dev
>


_______________________________________________
oae-dev mailing list
oae-dev@collab.sakaiproject.org
http://collab.sakaiproject.org/mailman/listinfo/oae-dev

Reply via email to