#1890: Can create tickets anonymously using the username of an authenticated 
user
----------------------------------------+-----------------------------------
 Reporter:  [EMAIL PROTECTED]  |        Owner:  cmlenz  
     Type:  defect                      |       Status:  assigned
 Priority:  normal                      |    Milestone:  0.10    
Component:  general                     |      Version:  0.8.4   
 Severity:  normal                      |   Resolution:          
 Keywords:  review                      |  
----------------------------------------+-----------------------------------
Comment (by anonymous):

 Replying to [comment:42 cboos]:
 > About r3461: do we really need to tell the world about the email
 address?
 > Maybe we could store two e-mails in the settings, public and private.
 > Use either one for the notifications, but only display the public one if
 given.

 No, this adds unnecessary complication. The users' email addresses should
 only be visible to admins and developers (TICKET_MODIFY?) by making the
 username a link to the email address. The email address itself should be
 stored in the database (instead of session) and the Cc field should be
 replaced with a simple "Watch this ticket"/"Stop watching this ticket"
 link. No more publicly accessible email addresses (we have enough SPAM!).
 This seems to be planned for 0.12, anyway, but I think that this is
 important enough to find its way into 0.11 together with real user
 management and public registration with username, password, email. That
 would finally make Trac usable for big projects (we'd still need improved
 queries, though).

-- 
Ticket URL: <http://projects.edgewall.com/trac/ticket/1890>
The Trac Project <http://trac.edgewall.com/>
_______________________________________________
Trac-Tickets mailing list
[email protected]
http://lists.edgewall.com/mailman/listinfo/trac-tickets

Reply via email to