search

AdaHeads / call-flow-control

Call-information flow server.
Other
6 stars 8 forks source link

How often should Alice warn about running in "Unsafe_Mode"? #82

Closed sparre closed 10 years ago

sparre commented 11 years ago

See issue #80 for the definition of "Unsafe_Mode".

sparre commented 11 years ago

Some options:

  1. At start-up.
  2. At every request usually requiring authentication.
  3. Once a minute.
  4. Every time a new HTTP session is created/registered.
rostgaard commented 10 years ago

What about at every login?

sparre commented 10 years ago

But you don't log in in "Unsafe_Mode". Except for that detail, it sounds like a sensible time for logging it.

sparre commented 10 years ago

Which gives us another problem: How do we identify the agent in "Unsafe_Mode"?

rostgaard commented 10 years ago

Couldn't we "log in" the users with a unique token without them having to provide passwords? They still need to go to the login screen as the first thing they do, when they start their day.

sparre commented 10 years ago

Identifying agents when in "Unsafe_Mode": #90

As we don't log users in in "Unsafe_Mode", maybe every time a new session is created/registered?

sparre commented 10 years ago

I'm in favour of options 1 and 4.

rostgaard commented 10 years ago

Ditto.

ThomasLocke commented 10 years ago

From system administration POV warning about unsafe mode at start-up is fine by me.

sparre commented 10 years ago

Decision time:

Alice will log that it is running in "Unsafe_Mode":

The log message will be reported at the level "warning" since it is a very serious problem, but not one where "action must be taken immediately" (the definition of the next level up from "warning"; "alert").