google-code-export / oppia

Automatically exported from code.google.com/p/oppia
Apache License 2.0
4 stars 0 forks source link

Invite Non-Registered User #610

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
In as much detail as possible, please describe what you would like to see.

1. Have the ability to send invites to non-registered Oppia users via  email 
when the manager of the exploration receives an error message that the user is 
not registered. Another way to think about it is the Google Docs invitation 
process.

What operating system are you using?
Linux Mint 17.1

Please provide any additional information below.
This feature would be helpful when the exploration is in its development phase. 

Original issue reported on code.google.com by kevinlee...@gmail.com on 17 Feb 2015 at 6:04

GoogleCodeExporter commented 9 years ago
Unfortunately this raises privacy concerns. Imagine that malicious user A knows 
the email address of person B. User A appoints B as the editor of an 
exploration by specifying her email address. Later B registers as a user and 
chooses a user name. Now B's user name will be given in the list of editors of 
the exploration. Thus A will be able to establish the user name associated with 
B's email address even though B might not want him to know it.

Generally speaking sites are expected to keep the relation between email 
addresses and user names confidential. We used to allow adding editors by email 
address but we had to remove the feature due to the above issue.

Original comment by jacobdav...@gmail.com on 17 Feb 2015 at 8:06