launchpad-dev team mailing list archive

[Curtis Hovey <curtis.hovey@xxxxxxxxxxxxx>]

On Wed, 2010-02-10 at 00:33 +1100, William Grant wrote:
> On Tue, 2010-02-09 at 08:26 -0500, Curtis Hovey wrote:
> > On Sun, 2010-02-07 at 19:57 -0800, Osprey Erp wrote:
> > > Ok, I thought that all accounts also showed up on staging server.  No?
> > > To use staging server to test some things do I have to create a
> > > separate account on the staging server?
> > 
> > 
> > I see an problem that needs immediate fixing. Staging has not been
> > updated in weeks. This means new users cannot use staging for testing,
> > which is a contributing factor to why so many users create test projects
> > in production. A stale staging db also makes testing hard. I rely on
> > staging to investigate registry data integrity issues, such as spam.
> > 
> > I will to land a fix for this bug this week:
> > 
> > Bug 321493 [Not possible to register or reset password on staging]
> >         https://bugs.edge.launchpad.net/launchpad-foundations/+bug/321493
> > 
> >         The register and forgot password views will test the template if
> >         the environment is staging. The templates will explain that
> >         outgoing email is disabled on staging and it will show the link
> >         to the LoginToken for the user to complete his action.
> 
> That sounds like a perfect recipe for complete information disclosure.

Um. You are right. I will not change the reset password view.


-- 
__Curtis C. Hovey_________
http://launchpad.net/

Attachment: signature.asc
Description: This is a digitally signed message part