search

BOINC / boinc

Open-source software for volunteer computing and grid computing.
https://boinc.berkeley.edu
GNU Lesser General Public License v3.0
2.03k stars 449 forks source link

Require unique username #193

Closed romw closed 6 months ago

romw commented 9 years ago

Reported by Eric Myers on 16 Jun 37375831 14:13 UTC Right now anybody can change their displayed username to anything, which allows for spoofing as someone else in the forums. Displaying the id# under the name/avatar helps prevent this, but doesnt' stop it.

We should require that all usernames be unique. They can still be changed, but whenever a name is chosen or changed it cannot be a name already in use.

Migrated-From: http://boinc.berkeley.edu/trac/ticket/193

romw commented 9 years ago

Commented by KSMarksPsych on 6 Oct 37436370 08:53 UTC I agree that this is a good idea. My question is how do you deal with all the current duplicate names? Or is that even needed?

Duplicate names do crop up. Just for fun, I did a user name search over at Seti for '''Administrator''' (as that seems to pop up in the forums occasionally. There are over 10000 members with that user name. This is an extreme example. But it does demonstrate how many duplicates can really pop up.

romw commented 9 years ago

Commented by Ageless on 19 Jun 37882287 20:26 UTC Reassigning to David.

romw commented 9 years ago

Commented by davea on 21 Apr 37883729 05:20 UTC I don't think this should be done.

romw commented 9 years ago

Commented by MikeMarsUK on 10 Oct 37884934 13:46 UTC

Perhaps rather than making it mandatory, it could be a hint to the user?

"The username 'Administrator' is already in use by 12,345 other accounts, you may prefer to pick a different name to avoid confusion"

romw commented 9 years ago

Commented by Eric Myers on 26 Mar 38178164 16:26 UTC How about making it an option for the projects to enable or disable? In keeping with keeping things the same it would be off by default.

For backward compatibility, you could allow existing dupes, but just not let new accounts use an existing name, or a change to an already existing name.

romw commented 9 years ago

Commented by Nicolas on 22 Aug 40457912 15:06 UTC Or what about requiring a unique username only to participate in forums? First time you try posting, if your name is also in use by other users, you're asked to change it.