aroberge / crunchy

Automatically exported from code.google.com/p/crunchy
0 stars 0 forks source link

Single mode vs server #208

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
At present, it is assumed that Crunchy is going to run as a "server" in a
multi user environment.  This means that we require a two step process:
create an account first, using the account_manager module and then start
Crunchy.

It might be worthwhile creating a default account that would bypass
authentication.  A nice friendly warning could be added on the front page
when that is done.  This could be done via the username plugin.

Original issue reported on code.google.com by andre.ro...@gmail.com on 12 Aug 2009 at 1:20

GoogleCodeExporter commented 9 years ago
The default account name could be called "Security Risk" and, when displayed by 
the
username plugin, could link to a page explaining what's being done.

In addition, account_manager could be then turned into a plugin and user names 
could
be added/removed right on a special page from within the browser.  This page 
would
only be viewable by people with administrative rights - either that or only
administrators would have access to the command to edit user information...

Original comment by andre.ro...@gmail.com on 12 Aug 2009 at 9:41

GoogleCodeExporter commented 9 years ago
This, other than the special page to be used as an interface to the 
account_manager,
has been implemented.  The special page idea would not be good as anyone could 
very
likely bypass the admin rights security feature and modify the user file to give
themselves admin rights....

Original comment by andre.ro...@gmail.com on 13 Aug 2009 at 2:35