Hello List,

It is often necessary that users can create their own accounts on the
fly and
I think that turbine (as a general framework) should support this
better.

One method I've used in the past is:

a) The User requests an account and fills out a form 
   with username, password, (password again) and EMAIL address.

b) the servlet which is processing the form creates a random key,
   sends this key via email to the address given in the above step.
   The record in the Visitor table is created with the random key
   in column KEY  and ACTIVE = 'N'.

        [2 further columns in the Visitor table are necessary:
           KEY  char(xx)  or int if the key is a random number
           ACTIVE  char(1) default 'N' or tinyint if me make it a number
                INDEX  (ACTIVE)  ]

c)  after the user receives his key he can activate his account.
    (again by filling out a form or with a link in the email
     where VISITORID or LOGINID and the KEY are in the URL for the
servlet.
    The servlet sets ACTIVE = 'Y' and the user is ready to use the
system.


   TurbineUser.retrieveFromStorage( String username ) should only return
   records where ACTIVE = 'Y'. If a site dont want to have this
procedure
   of account creation then simply set the default value for active to
'Y'
   and all is well.

I've also used step c) to set up the default permissions for the users.

The advantages:
1) We are sure that the user supplies the correct email address.
2) The user has a reference for his login information (the email).
3) If the user forgot his password he can reactivate his account with
his key.
4) We are sure we can actually communicate with the user via email.


OK, so think of it and let me know. 

Sorry for the long email but this has turned out to be quite a good
solution
for a past project so I thougt this would be a good enhancement.


greetings from .at

        wolfgang fiedler


-- 
************************************************************************
Wolfgang Fiedler http://fiedler.vc-graz.ac.at mailto:[EMAIL PROTECTED]
Student of Telematics at Graz University of Technology, Austria, Europe
Institute f. Information Processing & Computer Supported New Media
(IICM)


------------------------------------------------------------
To subscribe:        [EMAIL PROTECTED]
To unsubscribe:      [EMAIL PROTECTED]
Problems?:           [EMAIL PROTECTED]

Reply via email to