thewca / worldcubeassociation.org

All of the code that runs on worldcubeassociation.org
https://www.worldcubeassociation.org/
GNU General Public License v3.0
320 stars 175 forks source link

Should we require that users have a WCA ID in order to upload a profile picture? #1246

Open jfly opened 7 years ago

jfly commented 7 years ago

I think we should allow users to upload profile pictures, even if they do not have a WCA ID yet.

For:

Against:

SAuroux commented 7 years ago

Hi Jeremy, my problem with this is not more work for the WRT in the first place, but rather a complete lack of authentification requirements in order to upload a profile picture to our website. There for, we would not only have to deal with more incoming profile pictures, but potentially also with a lot of spam pictures.

As for your pro argument for non-competing delegates: Since we know if a user is a delegate or not, it should be easy to allow users with delegate status to upload profile pictures, no matter if they have a WCA-ID assigned or not.

a-Maass commented 7 years ago

how view-able would these profile pictures be?

jfly commented 7 years ago

There's currently no place on our website where the public would be able to see these. There are admin pages where delegates other website admins would be able to see these. Also, if a third party website that uses WCA OAuth (such a fantasy.cubing.net) chose to show profile pictures, then they would show up there.

pedrosino commented 7 years ago

I'm of the opinion that we should stick to only allowing people with a WCA ID to upload a picture. It makes not much sense to allow someone to upload a picture that would appear nowhere on our website.

If fantasy.cubing.net uses WCA OAuth and would require pictures for non-competitors, I guess they should maybe not use WCA OAuth :P