Issue Details (XML | Word | Printable)

Key: MARK-40
Type: Bug Bug
Status: Resolved Resolved
Resolution: Fixed
Priority: Major Major
Assignee: Shannon Krebs
Reporter: Paul Meehan
Votes: 2
Watchers: 1
Operations

If you were logged in you would be able to see more operations.
Confluence Social Bookmarking Plugin

Bookmark creation as Anonymous

Created: 05/Sep/07 09:45 AM   Updated: 22/Jan/08 04:31 AM
Component/s: None
Affects Version/s: None
Fix Version/s: 1.0.8

Time Tracking:
Not Specified

Environment: UNIX

Labels:


 Description  « Hide
When I went to add a bookmark the page registered it as being done by "Anonymous." I was logged in, why wouldn't it show as being created by me? We're using Active Directory and LDAP to have users login.

 All   Comments   Work Log   Change History   FishEye   Crucible   Builds      Sort Order: Ascending order - Click to sort in descending order
Shannon Krebs added a comment - 05/Sep/07 03:20 PM
The bookmark page where the url and comment are created should be shown to be created by the user that created the bookmark.

The ".bookmarks" parent page that all the other bookmarks in the space are children of is created as Anonymous. This is intentional to show that this page is automatically created and shouldn't really be attributed to any one user.


Guy Fraser added a comment - 21/Jan/08 06:27 PM
This is really grim IMHO. It should definitely show the author who created it, not anonymous. For example, someone just managed to create a .bookmarks page on a space on Adaptavist.com - yet we don't have the link to create bookmarks in our UI so that means they're hacking URL's. We don't allow anonymous users to create content in that space and seeing a page created by an anonymous user is SCARY especially when it also means that the person doing it was manually constructing URLs. How do I find out who actually created the page?

Alain Moran added a comment - 21/Jan/08 06:33 PM
IMO it would be better to completely do away with the pages, store the data in space bandana and use an action to generate an interface similar to the one you currently use pages for.

If you are using pages so that the data gets indexed, it should be possible to create a lucene extractor so that it gets displayed in confluence searches ... whether search-engines index the content is dependant on how you define and place the webu-ui link to the display action


Shannon Krebs added a comment - 21/Jan/08 07:18 PM
@Guy: Users shouldn't be able to create bookmarks if they don't have permission to create content in the space. Could be a bug if the parent page is being created before the permission check is done.

@Alain: It would be nice to move away from pages but until there is some way for plugins to add their own subclasses of a ContentEntityObject or similar I don't think it is going to happen. At the moment by using pages you get stuff like permissions, API access and "recently added" listing automatically.


Guy Fraser added a comment - 21/Jan/08 07:55 PM
Registered users are allowed to create pages in the space, however the page was created anonymously by the plugin - if a registered user creates the page, their name should be assigned to it.

The only time it should be anonymous is if anonymous users are allowed to create pages and the person who creates the page is, in fact, anonymous.

Having anonymously created pages, whatever the reasoning, in a community is a BAD idea - the following article is well worth reading as it explains this issue better than I ever could: http://www.alistapart.com/articles/identitymatters/


Shannon Krebs added a comment - 22/Jan/08 04:31 AM
The bookmark parent page will now be created by the user that creates the first bookmark in a space.