make rename tokens independent of accounts #825
Comments
|
What security checks should there be to ensure that the account being renamed (or to which the rename token is being transferred if that implementation is chosen) and the account owning the rename token are under control of the same user? |
|
'Same confirmed email address' should do. |
|
What information should be logged about the transfer (whether implemented standalone or as part of the rename workflow), and where? |
|
Okay, so, I completely misunderstood you on the previous question and answered wrongly: if it's "allow people to manually enter a rename token" there's no need to require same email addresses, have any kind of confirmation checks, or log anything. Someone should be able to say to a friend "hey, I have this rename token I'm not using, want it?", basically. (Or, someone who buys two tokens for the single account when they want to rename multiple accounts should be able to fix that without me having to do some massive fucking around.) I think "allow people to manually enter a rename token ID" is a much better way than building some kind of token transfer system, the more I think about it, so both of your questions are moot. |
Enter rename token id by hand. Fixes #825
Correct rename token email link format. Fixes #825
* makes /rename/ work (note the ending slash) * updates the URL in the receipt
* release-1.23: [#1169] Reduce the size of the textarea slightly [#1169] Fix misalignment of quick entry metadata section [#1169] Fix display of quick buttons/dropdowns section [#1169] Tweak placement of the preview/spellcheck buttons [#1169] Fix vertical gap when tag wraps onto multiple lines [#1169] Widen the max page width for all site skins [#1169] Remove gratuitous space between quick-buttons and components [#1169] Change the font family of the textarea back to monospace [#1169] Shrink font size of entry options (to match rest) [#1169] Reduce padding / margins in and around components [#1169] Remove space below last form element if it's label + input combo [#1169] Tweak the wrapping of the tags checkbox more [#1169] Don't force line-height on selects/inputs [#1169] Shrink form-element padding inside components [#1169] Make sure selects are the same size as the rest of component [#1169] Fix wrapping of checkbox/radio text in modals [#1169] More wording tweaks [#1169] Allow multiple columns in medium-sized screens [#1169] Tweak capitalization of "Reading pages" [#1169] Change "Crosspost Accounts" to "Crosspost to:" [#1169] Fix saving of panel position after moving incorporating spacing into the tagnav class instead of having a breakout. class handle on the padding, too. Additional CSS class "tagnav" to provide customization options for tag arrows [#1134] Use protocol-relative URL for image objects in S2 [#1138] Only add the blank space when we are showing tag arrows [#825] Fix URL for renames [#1135] Make sure effective remote is set properly for non-BML pages [#1002] Don't redirect if we're on $SSLICONPREFIX Fix errors found in the logs This one too. This is not an everywhere table Fixes uses of the wrong filter and spurious \
people sometimes buy multiple rename tokens on a single account, and then run into problems because they wanted to rename multiple accounts.
Either allow ppl to manually enter a rename token number that they have from another account, or make some way for ppl to transfer tokens from one account to another.
The text was updated successfully, but these errors were encountered: