inCliques / social_addressbook

2 stars 1 forks source link

Removing Social Profiles from accounts created with a Social Profile #20

Open magitam opened 13 years ago

magitam commented 13 years ago

When removing a social profile/connection (i.e. to Viadeo/Twitter), when that was used to 'register' the account, then the system should check to see that the user has a valid email address that has been verified on the account.

If the user doesn't have a valid verified email address, or a verified alternative social profile/connection associated with the account, then the user should not be allowed to 'remove' the social network connection, until after an alternative method has been verified. In the instance of email, if the email address has been verified, and a password has not been created to work with the email address, in order to log in, then the system should prompt the user to create a password for their account, with their email address, before they can remove the social connection.

kynan commented 13 years ago

In fact, whenever you sign up via a social connection, you currently always have to verify your email address. However, since you haven't set a password, you'll have to reset the password to be able to log in with that email address after having removed the social network connection.