search

citizenlabsgr / adopt-a-drain

Deploy an Adopt-a-Drain program for the Grand River watershed.
https://lgrow-staging.herokuapp.com
BSD 3-Clause "New" or "Revised" License
2 stars 2 forks source link

Sidebar - Fake Registrations #62

Open Wilfongjt opened 6 years ago

Wilfongjt commented 6 years ago

Adopting drains is so easy that one person can adopt many in a short period of time.

Adopt-a-drain registration process allows a users to enter fake email addresses. A fake account could then go on to maliciously adopt large quantities of drains to keep others from adopting.

We need to develop a process to, at a minimum, verify the validity of a registrant's email.

cara-lgrow commented 6 years ago

~Interesting. We will have to discuss this in the future.~

~Another thought that I had- is there any way to import the already adopted drains from the City of Grand Rapids into this system? I'm concerned about people having to 're-adopt' their drains...but I'm not sure if there is a way around this. Something to keep in mind as development moves forward.~

MOVED TO "Basin Buddy - transfer accounts and adopted drains to AAD #73"

Allen616 commented 6 years ago

Not sure how difficult this might be, what about putting a daily (or other unit of time) limit to registering drains?

Wilfongjt commented 6 years ago

How about a retention schedule to implement the delay...Retention is based on pairing an adoption removal with a retention period (aka, delay). When the retention period is exceeded the adoption is un-done.

In the case of adopting a drain, clicking the adopt button would mark the drain as a new adoption and send a confirmation email to the user. The system would treat the adoption as real. Other users would see the adoption and life would go on. Let’s say the retention period is 24 hours from the moment of adoption, the adopter would have 24 hours to check their email and click a confirmation link. Clicking the confirmation link would cause the retention period to be reset to one year from the time of confirmation. A year later, a process would fire off another email to let the person reconfirm or unadopt. If no action, taken then drain is automatically unadopted…

Adoption Retention Schedule

Activity Retention Period
adoption 24 hours
adoption confirmation 1 year

P.S., This logic is also applicable clearing out inactive user accounts.

boekesteine commented 5 years ago

I think this is a good idea. It's similar to how City of GR currently works. Users are reminded to re-adopt annually.