• aodcxylfen

  last modified October 12, 2006 by k0s

Task list to stabilize remember

(2 days) DONE - * Softening bcrypt dependency - import/export all that's left + testing

(add integration test for generic setup of remember tool with hash-type
 annotated in xml - test both positive and negative cases)
.5 day


(3 days) DONE - * Adding layers to test fixtures -
.5 day

(.25 day) DONE - * Add HMAC/SHA to encryption stack when defaulting -
.5 day

(.5 day) DONE - * portal_member data tool does, but shouldn't show up under navigation
  - how should we solve this? Not as simple as removing visible
    permissions from object?

    see: Products/CMFPlone/profiles/default/propertiestool.xml

    Plone Specific:
    site setup -> Navigation Settings -> Member Data Container ->
    set title (Member Profiles)
1.5 days

(3 days) DONE * on preferences page, cannot change password
   - involves configlets
   - add change password link
   -> portal skins -> in a template -> register configlet
2.5 days

(0 - by ra) DONE * portraits - fix failing portrait test
-wait for Rob's direction-

* unit tests for member_approval_workflow -
2 days

(5 days) DONE * hide some of the edit profile content - what should be hidden? (ie
  external editor?)
  Old way: get authenticated user -> edit
  New way: member is content
  NO: - Add Member to folder (done)
      - Actions (done)
      - Properties (done)
      - Send mail with password (done)
  Edit -> Save -> Edit, NOT Edit -> Save -> View
       - (see CMFMember CMFFormController)
  Kill edit border? (but allow making profile private)
  Allow workflow state change (public/private)
4 days

* IPloneMember interface: define (possibly evolve into IPloneUser) -
-wait for Rob-

* look into PAS handling auth_plugin (find login and fail vs doesn't
  find login, find other auth plugin) -
  o PluggableAuthService/plugins/ZODBUserManager.authenticateCredentials:
    should this return False on failure instead of None, which might indicate no user
-write up and post problem to web and PluggableAuthen.*-
0.25 day

* heterogenous member environment - when upgrading to remember,
  we should provide a migration tool to convert users from old members to
  remembers. Ideally, this would not be required, but we need to explore this
  further. Testing required.
3.5 days, end of iteration