Team approval link breaks if applicant changed their ID

Bug #113766 reported by Matthew Paul Thomas
6
Affects Status Importance Assigned to Milestone
Launchpad itself
Triaged
Low
Unassigned

Bug Description

From Martin Albisetti: "Several times users have applied to join a team I own, making Launchpad fire off an email with a convenient quick link to approve the new user. It has happened several times (maybe 4 or 5), that a user applies to the team, and then changes it's Launchpad ID almost immediately after, making the link in the email send me to an invalid URL."

Revision history for this message
Matthew Paul Thomas (mpt) wrote :

From Matthias Urlichs: "Well, my idea would be to use the database ID of that person in the URL,
much like we're using a bug number instead of its subject..."

Revision history for this message
Alex Latchford (alex.latchford) wrote :

Maybe sending another email to unapproved team leaders would be another solution, however I admit that User ID's are a more elegant solution.

Alex.

Changed in launchpad:
status: Unconfirmed → Confirmed
Revision history for this message
Guilherme Salgado (salgado) wrote :

Using the database ID has the disadvantage of making it impossible to find out from the URL itself what is the team and the member in question, but I don't see any other way to address this issue since the DB ID is the only immutable attribute of a person.

Revision history for this message
Jamu Kakar (jkakar) wrote :

You could create a tinyurl-like hash that maps to whatever state you
need in your database. The link could include it directly or as a
query argument:

.../approve/abc123!@#
.../approve?key=abc123!@#

Revision history for this message
Matthew Paul Thomas (mpt) wrote :

Another suggestion, this one from "Jerry": "The process of accepting an application to be on a team could include setting a flag in a registration file of some sort. This file would be checked by the process that handles a request to change a user's Launchpad ID. If their current ID appears in the list, the request to change IDs could be denied. Either that, or the new ID could be placed in the file, so the team leaders could access it, perhaps with the new ID(s) showing up as "aliases", until the old ID no longer appears in the file, because it no longer appears on any team list. This could be because of manual removal, or an update."

Revision history for this message
Duncan Lithgow (duncan-lithgow) wrote :

Someone with the necessary privileges should edit FAQ #53 (https://answers.edge.launchpad.net/launchpad/+faq/53) so it mentions this bug.

Curtis Hovey (sinzui)
Changed in launchpad-registry:
importance: Undecided → Wishlist
status: Confirmed → Triaged
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.