https://bugzilla.wikimedia.org/show_bug.cgi?id=30636

--- Comment #19 from Gregor Hagedorn <[email protected]> 2011-09-24 
19:11:59 UTC ---
> Can you walk us through the usecase for this functionality?  Not what you want
> the software to provide, but what you want users to be able to achieve?  What
> scenario begins with Joe Bloggs sitting down at his desk, and ends with James
> Admin using this extension to change Joe Bloggs' password to 'foobar'?

Correct. John has little general software knowledge and collaborates on a
mediawiki with specific tasks he has learned to perform. He has no business
email in the organisation, and the organisation never had a policy to change
the mediawiki default setting of $wgEmailConfirmToEdit. John forgets his
password and contacts his software admin by telephone (the admin is sitting in
a different building/city/whatever). The admin creates a new
one-time-password-token for John, telling him to perform a normal login, and
informing him that the password can only be used once and will result in a
password-selection screen, where John has to choose a self-selected new
password. The admin action is logged.

This scenario would probably honor all admin best practices and could be
implemented in core rather than an extension.

(Timing is the only problem in this.)

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to