search

Cadasta / cadasta-qgis-plugin

[DEPRECATED] QGIS plugin to create, edit, upload and download Cadasta projects
GNU General Public License v3.0
4 stars 7 forks source link

User Settings :: Restart QGIS required for switching URLS #197

Closed SteadyCadence closed 7 years ago

SteadyCadence commented 7 years ago

I was screen sharing with a partner that forgot her password. She kept trying different passwords and the "test connection" just failed. No error message (we should make sure there are proper errors on the cadasta API)

She restarted her password on the web and then tried using it on the qgis plugin. It still failed.

When a user restarts their password, it would be nice to have instruction or messaging that prompts them with instruction.

SteadyCadence commented 7 years ago

Another related issue:

  1. I created a new account in Cadasta.
  2. Signed in on that account.
  3. The User Setting worked fine and I successfully Connected and Saved.
  4. When I went to pull down all of the public projects from the new account, the projects from my previous account were pulled down instead.

This may be a security concern if a project manager has logged in on an office computer with the QGIS plugin and then a data collector logins. If QGIS is not restarted, then the data collector will have the same access to the data as that previous project manager.

dimasciput commented 7 years ago

@SteadyCadence can you test this again on the latest build?

SteadyCadence commented 7 years ago

I was able to reproduce this one again. What happens is if a user does not hit "Clear" then and they fill out their username and password, those new usernames and passwords don't get saved if the auth token has been cached from the previous user. They may think that they have logged in but the User Settings is still using the token from the previous user.

Is there a way to set up the User Settings so that it is not dependent on the "Clear" button?

@clash99 , do you have any suggestions for how to make the login process smoother for switching user account?

dimasciput commented 7 years ago

@SteadyCadence I disabled the username and password input if user didn't click the button, here's the gif :

kartoza