Re: requiring login to perform Trac actions?

2014-03-04 Thread Florian Apolloner
On Tuesday, March 4, 2014 8:39:36 AM UTC+1, Anssi Kääriäinen wrote: > > I'd like to have some security against reporting as somebody else. > Currently one can report or comment anonymously and mark reporter as core > committer. This is too easy to abuse. +1 for requiring login. At least >

Re: requiring login to perform Trac actions?

2014-03-04 Thread Shai Berger
On Monday 03 March 2014 16:17:13 Tim Graham wrote: > There's been some discussion on ticket > #22067 and #django-dev about > requiring Trac login to help cut down on spam and generally improve the > quality of the discussion. > +1 for requiring login,

Re: requiring login to perform Trac actions?

2014-03-03 Thread Sam Lai
On 4 March 2014 10:44, Russell Keith-Magee wrote: >> If you believe the "create an account" barrier is a problem, do you think >> adding something like GitHub auth to Trac would lower the barrier to an >> acceptable level? > > > This sounds like a reasonable option to me.

Re: requiring login to perform Trac actions?

2014-03-03 Thread Anssi Kääriäinen
I'd like to have some security against reporting as somebody else. Currently one can report or comment anonymously and mark reporter as core committer. This is too easy to abuse. +1 for requiring login. At least force anonymous reports to be anonymous. - Anssi On 03/04/2014 09:24 AM, Marc

Re: requiring login to perform Trac actions?

2014-03-03 Thread Marc Tamlyn
+1 to github oauth and requiring login. Having github auth, especially for new reports is very useful and would help to tie together when people use different names. Marc On 3 Mar 2014 23:44, "Russell Keith-Magee" wrote: > > On Mon, Mar 3, 2014 at 10:17 PM, Tim Graham

Re: requiring login to perform Trac actions?

2014-03-03 Thread anubhav joshi
> > If you believe the "create an account" barrier is a problem, do you think > adding something like GitHub auth to Trac would lower the barrier to an > acceptable level? > I am in favour of this, as while I was going through tickets, I have found many tickets where people have anonymously

requiring login to perform Trac actions?

2014-03-03 Thread Tim Graham
There's been some discussion on ticket #22067 and #django-dev about requiring Trac login to help cut down on spam and generally improve the quality of the discussion. Claude: I think that forcing registration would be fine. It adds a small barrier