Re: [translate-pootle] Dealing with users who forgot password
On Sun, Oct 5, 2008 at 10:45 PM, Israel Saeta Pérez <[EMAIL PROTECTED]> wrote: > I'm currently in my work crisis since my company has to release a new > version of a webapp and I'm doing a lot of extra hours. :-( No worries, I know how it goes, have been stuck there myself for a while now. :) > I hope next week I will get some free time to work on this feature, > but I can't promise anything, sorry. In that case I'll make a start this week; whenever you have some time available please let me know then we can collaborate on whatever still needs to be done at that point. Cheers, Charl -- Charl van Niekerk http://charlvn.za.net - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ ___ Translate-pootle mailing list Translate-pootle@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/translate-pootle
Re: [translate-pootle] Dealing with users who forgot password
On Sun, Oct 5, 2008 at 12:55 AM, Charl van Niekerk <[EMAIL PROTECTED]> wrote: > On Fri, Sep 26, 2008 at 2:08 PM, Dwayne Bailey <[EMAIL PROTECTED]> wrote: >> Wonderful! You have the job ;) >> >> Seriously, I had/have no jToolkit skills and Pootle code to me is >> mystically. Yet I managed to add plural support for live translations >> and a number of other tweeks. Doing the password recovery would really >> just bee checking how we currently do passwords and slowly working >> towards the goal. >> >> Are you up for it? > > I now finally worked past my work crises, am starting to get some time > again. However my list is still quite long, Israel, are you perhaps > already busy with it or could you take this on? I'm currently in my work crisis since my company has to release a new version of a webapp and I'm doing a lot of extra hours. :-( I hope next week I will get some free time to work on this feature, but I can't promise anything, sorry. -- Israel - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ ___ Translate-pootle mailing list Translate-pootle@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/translate-pootle
Re: [translate-pootle] Dealing with users who forgot password
On Fri, Sep 26, 2008 at 2:08 PM, Dwayne Bailey <[EMAIL PROTECTED]> wrote: > Wonderful! You have the job ;) > > Seriously, I had/have no jToolkit skills and Pootle code to me is > mystically. Yet I managed to add plural support for live translations > and a number of other tweeks. Doing the password recovery would really > just bee checking how we currently do passwords and slowly working > towards the goal. > > Are you up for it? I now finally worked past my work crises, am starting to get some time again. However my list is still quite long, Israel, are you perhaps already busy with it or could you take this on? Cheers, Charl -- Charl van Niekerk http://charlvn.za.net - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ ___ Translate-pootle mailing list Translate-pootle@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/translate-pootle
Re: [translate-pootle] Dealing with users who forgot password
On Sun, 2008-09-21 at 23:25 +0200, Israel Saeta Pérez wrote: > Hello list, > > On Sun, Sep 21, 2008 at 8:23 AM, Samuel Murray (Groenkloof) > <[EMAIL PROTECTED]> wrote: > > Israel Saeta Pérez wrote: > > > >> The automated process could be: > >> 1) The user clicks the "I've lost my password" link and enter his username. > >> 2) A random password reset hash code is generated and associated to > >> the user_id and the current date in a (special) table. > >> 3) The hash code is sent to the user's email. > >> 4) The user access a special URL with the code in it, like > >> http://example.org/passwordrecovery/ahx4bFj84DjunX0hax0r, in less than > >> 24h. > >> 5) The user sets his new password. > > > > I have no objection to this method, or any other method, but who would > > be coding it? The problem with such elegant solutions is that they > > require extensive coding. This is the reason for my temporary solution > > -- it requires only a few simple changes to the HTML templates, and > > perhaps one static HTML file. > > I totally agree: the first inmediate thing to tackle would be the > mail-to-admin solution, since it looks really easy to implement and > later the automatic method, only if somebody is keen on implementing > it. > > Unfortunately I've never touched a line of jToolkit but I have some > SQLAlchemy an Python skills, if it helps. Wonderful! You have the job ;) Seriously, I had/have no jToolkit skills and Pootle code to me is mystically. Yet I managed to add plural support for live translations and a number of other tweeks. Doing the password recovery would really just bee checking how we currently do passwords and slowly working towards the goal. Are you up for it? > > > Pootle currently requires activation of an account. This is not ideal, > > IMO, because the user must remember what password he had chosen when he > > registered. The act of activation does not automatically log in the > > user. The user must also remember his username. This may seem a > > trivial thing, but looking at the HTTP logs I can tell you that new > > users often get their usernames wrong the first time they try to log in > > (and I can only wonder how many users we lose because of that). A > > common problem is capitalisation (as user names are case-sensitive). > > Isn't his username mentioned in the activation email? Or there isn't > any activation email? Sorry for so newbie question. > > Anyways, I guess the login function could be hacked to accept email > addresses instead of usernames too. > > > If there is going to be extensive coding, perhaps we should look at the > > whole issue of registration and not just lost passwords. > > Why not? But I don't know how high is this in the Pootle development > priority list. > > -- Israel > > - > This SF.Net email is sponsored by the Moblin Your Move Developer's challenge > Build the coolest Linux based applications with Moblin SDK & win great prizes > Grand prize is a trip for two to an Open Source event anywhere in the world > http://moblin-contest.org/redirect.php?banner_id=100&url=/ > ___ > Translate-pootle mailing list > Translate-pootle@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/translate-pootle -- - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ ___ Translate-pootle mailing list Translate-pootle@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/translate-pootle
Re: [translate-pootle] Dealing with users who forgot password
Israel Saeta Pérez wrote: > On Sun, Sep 21, 2008 at 8:23 AM, Samuel Murray (Groenkloof) > <[EMAIL PROTECTED]> wrote: >> Pootle currently requires activation of an account. This is not ideal, >> IMO, because the user must remember what password he had chosen when he >> registered. The act of activation does not automatically log in the >> user. The user must also remember his username. I apologise... I just checked a Pootle registration mail and it appears that the user's username, password and mail address are included in it. I must add that I often get people tell me that they never receive their activation mail, which means I have to activate their accounts manually. Samuel -- Samuel Murray [EMAIL PROTECTED] Decathlon, for volunteer opensource translations http://translate.sourceforge.net/wiki/decathlon/ - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ ___ Translate-pootle mailing list Translate-pootle@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/translate-pootle
Re: [translate-pootle] Dealing with users who forgot password
On Mon, Sep 22, 2008 at 3:26 AM, Charl van Niekerk <[EMAIL PROTECTED]> wrote: > Friedel asked me about a month or so ago to implement it as soon as I > have time, at the time I agreed but at the moment I am finding myself > in the middle of quite a lot of work and unfortunately I'm unable to > say when I will have this ready. Sorry, that was perhaps a bit confusing. What I wanted to say is that I hope somebody else with more time available can take this off my hands but if not then I'm sure I will get some time in the next month to handle this. Cheers, Charl -- Charl van Niekerk http://charlvn.za.net - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ ___ Translate-pootle mailing list Translate-pootle@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/translate-pootle
Re: [translate-pootle] Dealing with users who forgot password
On Sun, Sep 21, 2008 at 11:25 PM, Israel Saeta Pérez <[EMAIL PROTECTED]> wrote: > Why not? But I don't know how high is this in the Pootle development > priority list. Friedel asked me about a month or so ago to implement it as soon as I have time, at the time I agreed but at the moment I am finding myself in the middle of quite a lot of work and unfortunately I'm unable to say when I will have this ready. Best Regards, Charl -- Charl van Niekerk http://charlvn.za.net - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ ___ Translate-pootle mailing list Translate-pootle@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/translate-pootle
Re: [translate-pootle] Dealing with users who forgot password
Hello list, On Sun, Sep 21, 2008 at 8:23 AM, Samuel Murray (Groenkloof) <[EMAIL PROTECTED]> wrote: > Israel Saeta Pérez wrote: > >> The automated process could be: >> 1) The user clicks the "I've lost my password" link and enter his username. >> 2) A random password reset hash code is generated and associated to >> the user_id and the current date in a (special) table. >> 3) The hash code is sent to the user's email. >> 4) The user access a special URL with the code in it, like >> http://example.org/passwordrecovery/ahx4bFj84DjunX0hax0r, in less than >> 24h. >> 5) The user sets his new password. > > I have no objection to this method, or any other method, but who would > be coding it? The problem with such elegant solutions is that they > require extensive coding. This is the reason for my temporary solution > -- it requires only a few simple changes to the HTML templates, and > perhaps one static HTML file. I totally agree: the first inmediate thing to tackle would be the mail-to-admin solution, since it looks really easy to implement and later the automatic method, only if somebody is keen on implementing it. Unfortunately I've never touched a line of jToolkit but I have some SQLAlchemy an Python skills, if it helps. > Pootle currently requires activation of an account. This is not ideal, > IMO, because the user must remember what password he had chosen when he > registered. The act of activation does not automatically log in the > user. The user must also remember his username. This may seem a > trivial thing, but looking at the HTTP logs I can tell you that new > users often get their usernames wrong the first time they try to log in > (and I can only wonder how many users we lose because of that). A > common problem is capitalisation (as user names are case-sensitive). Isn't his username mentioned in the activation email? Or there isn't any activation email? Sorry for so newbie question. Anyways, I guess the login function could be hacked to accept email addresses instead of usernames too. > If there is going to be extensive coding, perhaps we should look at the > whole issue of registration and not just lost passwords. Why not? But I don't know how high is this in the Pootle development priority list. -- Israel - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ ___ Translate-pootle mailing list Translate-pootle@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/translate-pootle
Re: [translate-pootle] Dealing with users who forgot password
Israel Saeta Pérez wrote: > The automated process could be: > 1) The user clicks the "I've lost my password" link and enter his username. > 2) A random password reset hash code is generated and associated to > the user_id and the current date in a (special) table. > 3) The hash code is sent to the user's email. > 4) The user access a special URL with the code in it, like > http://example.org/passwordrecovery/ahx4bFj84DjunX0hax0r, in less than > 24h. > 5) The user sets his new password. I have no objection to this method, or any other method, but who would be coding it? The problem with such elegant solutions is that they require extensive coding. This is the reason for my temporary solution -- it requires only a few simple changes to the HTML templates, and perhaps one static HTML file. Pootle currently requires activation of an account. This is not ideal, IMO, because the user must remember what password he had chosen when he registered. The act of activation does not automatically log in the user. The user must also remember his username. This may seem a trivial thing, but looking at the HTTP logs I can tell you that new users often get their usernames wrong the first time they try to log in (and I can only wonder how many users we lose because of that). A common problem is capitalisation (as user names are case-sensitive). If there is going to be extensive coding, perhaps we should look at the whole issue of registration and not just lost passwords. Samuel -- Samuel Murray [EMAIL PROTECTED] Decathlon, for volunteer opensource translations http://translate.sourceforge.net/wiki/decathlon/ - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ ___ Translate-pootle mailing list Translate-pootle@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/translate-pootle
Re: [translate-pootle] Dealing with users who forgot password
Hello, I'm operating a Pootle translation site for the Sahana Disaster Management System Project. The process Israel suggests is quite what I'm (urgently) missing in the Pootle UI - I think this would be the best way to handle it. Kind regards, Dominic söndag, 21. september 2008 00:52 skrev Israel Saeta Pérez: > I'm ok with password recovery, automated and manual. > > The automated process could be: > 1) The user clicks the "I've lost my password" link and enter his username. > 2) A random password reset hash code is generated and associated to > the user_id and the current date in a (special) table. > 3) The hash code is sent to the user's email. > 4) The user access a special URL with the code in it, like > http://example.org/passwordrecovery/ahx4bFj84DjunX0hax0r, in less than > 24h. > 5) The user sets his new password. > > Do you agree with this method? > > -- Isra > > - > This SF.Net email is sponsored by the Moblin Your Move Developer's > challenge Build the coolest Linux based applications with Moblin SDK & win > great prizes Grand prize is a trip for two to an Open Source event anywhere > in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ > ___ > Translate-pootle mailing list > Translate-pootle@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/translate-pootle pgpQ2QiQOP13U.pgp Description: PGP signature - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/___ Translate-pootle mailing list Translate-pootle@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/translate-pootle
Re: [translate-pootle] Dealing with users who forgot password
Sorry guys this is my bad. I was supposed to fix this long ago. I thought I would have gotten time already but at the moment am pretty busy and haven't get gotten around to it yet unfortunately. Is there somebody else that has already taken the initiative or that is busy working on this? Best Regards, Charl -- Charl van Niekerk http://charlvn.za.net - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ ___ Translate-pootle mailing list Translate-pootle@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/translate-pootle
Re: [translate-pootle] Dealing with users who forgot password
I'm ok with password recovery, automated and manual. The automated process could be: 1) The user clicks the "I've lost my password" link and enter his username. 2) A random password reset hash code is generated and associated to the user_id and the current date in a (special) table. 3) The hash code is sent to the user's email. 4) The user access a special URL with the code in it, like http://example.org/passwordrecovery/ahx4bFj84DjunX0hax0r, in less than 24h. 5) The user sets his new password. Do you agree with this method? -- Isra - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ ___ Translate-pootle mailing list Translate-pootle@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/translate-pootle
Re: [translate-pootle] Dealing with users who forgot password
I think better would be automated retrieval but it would be a start. :) Wil On Fri, Sep 19, 2008 at 11:20 PM, Samuel Murray (Groenkloof) <[EMAIL PROTECTED]> wrote: > [resending] > > G'day everyone > > At present, there is no mechanism in Pootle for users who have forgotten > their passwords, to retrieve it. I think this may be a cause of user > loss, if users try to retrieve their passwords and discover that they > can't. Not all users would think of e-mailing the server admin to reset > the password, and not all who do, can always find the right address. > > An easy solution to deal with users who want to retrieve their password > would be to have a link "Lost your password?" on the login page, and > when a user clicks it, he is redirected to a page telling him the > procedure for retrieving the password. At present, this would be "send > a request to such and such person". > > Do you think this is a good idea? > > Samuel > > -- > Samuel Murray > [EMAIL PROTECTED] > Decathlon, for volunteer opensource translations > http://translate.sourceforge.net/wiki/decathlon/ > > > - > This SF.Net email is sponsored by the Moblin Your Move Developer's challenge > Build the coolest Linux based applications with Moblin SDK & win great prizes > Grand prize is a trip for two to an Open Source event anywhere in the world > http://moblin-contest.org/redirect.php?banner_id=100&url=/ > ___ > Translate-pootle mailing list > Translate-pootle@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/translate-pootle > - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ ___ Translate-pootle mailing list Translate-pootle@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/translate-pootle
[translate-pootle] Dealing with users who forgot password
[resending] G'day everyone At present, there is no mechanism in Pootle for users who have forgotten their passwords, to retrieve it. I think this may be a cause of user loss, if users try to retrieve their passwords and discover that they can't. Not all users would think of e-mailing the server admin to reset the password, and not all who do, can always find the right address. An easy solution to deal with users who want to retrieve their password would be to have a link "Lost your password?" on the login page, and when a user clicks it, he is redirected to a page telling him the procedure for retrieving the password. At present, this would be "send a request to such and such person". Do you think this is a good idea? Samuel -- Samuel Murray [EMAIL PROTECTED] Decathlon, for volunteer opensource translations http://translate.sourceforge.net/wiki/decathlon/ - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ ___ Translate-pootle mailing list Translate-pootle@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/translate-pootle
