-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Channa Gunawardena wrote:
> Hi All,
> 
> Changing the self registration process to accept an infocard seems to be
> a fairly easy, but there are two things I personally don't like with the
> approach that seems to be taking shape:
> 
> 1) Using the PPID in place of the user name - this will give us the most
> unfriendly user directory name I can imagine :-(.

-1 for creepy cryptic stuff in user directory names.

> 2) Skipping the e-mail verification process - since users can register
> with self issued cards (where e-mail ID's have been specified by the
> users themselves) without e-mail verification, we wont know if the
> e-mail ID supplied by the card is valid.
> 

This won't be an issue, since the infocard provider would have done the
verification already. We can assume that the e-mail is valid.

However, I'm not sure what you meant by 'self issued' though. Does this
mean that people can have fake infocards ? If so, is there a way to
verify an inofrcard against a trusted set of providers?

> I would propose this:
> 
> 1) Have the infocard icon on the self registration page, but clicking
> that will just save the user the trouble of entering the information
> already in the card by filling out most of the form and also save a
> later association step by automatically associating the PPID with the
> profile.

+1. The user can enter the additional/optional information later. This
pattern is increasingly followed by many community sites.

I would also like to suggest a feature in the profile page, which would
indicate how complete a users profile is, as a percentage.

Ex: "Your profile is 50% complete, filling out your hobbies and
interests will bring it to 65%"... and so forth.

> 2) The self-reg form will be re-displayed with infocard details filled
> it. The user name will still have to be entered at this point and will
> not be optional, as we will create the user directory using this.

+1

Cheers,

Tyrell

> 3) I'm fine with not insisting on a password, if the user manager's
> e-mail verifier can do it's round trip without one.
> 
> The rest of the process will not change from what we have now. What do
> you guys think?
> 
> Bye,
> Channa.
> 

- --
Tyrell Perera
Senior Software Engineer; WSO2, Inc.; http://www.wso2.com/
email: [EMAIL PROTECTED]; cell: +94 77 302 2505

"Oxygenating the Web Service Platform."
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD4DBQFHc46AehFdPcgGx7oRAio2AJd12pQsP1ejLoz9vLnZMbNBNI4mAJ9KOIzp
sXJsHHsCSyi7xIX811orgg==
=5klh
-----END PGP SIGNATURE-----

_______________________________________________
Mashup-dev mailing list
[email protected]
http://www.wso2.org/cgi-bin/mailman/listinfo/mashup-dev

Reply via email to