Is this really such a good idea?  It seems to me that there's no
functional difference between an admin loggin in and a user logging in.
  They may have different destinations, but the idea of providing a
different system for logging in different kinds of users will create
terrible code headaches later.

Then there's the security risk.  Having a clear "admin" login page
creates a distinct attack point, particularly if the default "admin"
user is "admin".  Then you only have to guess the password.

-- 
You received this bug notification because you are a member of Open Font
Library Developers, which is subscribed to Open Font Library.
https://bugs.launchpad.net/bugs/728872

Title:
  users need a separate sign-in page from admins

Status in Open Font Library:
  In Progress

Bug description:
  The current "Log in" in the header links to [root]/login, which is the
  sign-in page for admins.

  The link could instead read "Sign in" and must point to
  [root]/users/sign_in or [root]/users/login

  A widget then needs to be available on at that url to handle sign-in

_______________________________________________
Mailing list: https://launchpad.net/~aikiframework.admins
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~aikiframework.admins
More help   : https://help.launchpad.net/ListHelp

Reply via email to