DisOrder user management
Dec. 31st, 2007 11:13 amI've been rewriting DisOrder's user management code lately. In the next version the web interface will use cookies instead of HTTP basic authentication and there is a flexible system of user rights behind the scenes.
What you get when you initially visit the web interface is now, instead of a blunt demand for a username and password, read-only access. In fact the administrator can open this up a bit, for instance giving guests the ability to scratch randomly chosen tracks but not those specifically requested by someone.
There is also a registration page where you can create yourself a new login automatically. This can be disabled for sites that would rather a human was in the loop for any new logins.
The full design can be found here but if you don't want to read that, have some screenshots instead:
Note that Choose and Search are greyed out for the guest user. (Searching is really an alternative choose operation, so not as read-only as it sounds.) (It's my web browser that remembered my username and password.)
An example of the confirmation email:
Received: from localhost ([127.0.0.1] helo=lyonesse.anjou.terraraq.org.uk ident=www-data) by lyonesse.anjou.terraraq.org.uk with smtp (Exim 4.63) id 1J9IpG-0007LA-Se for rjk@greenend.org.uk; Mon, 31 Dec 2007 11:28:58 +0000 Message-ID: <muErwzyxgvf+8hDJs+HRN83+4zI=@lyonesse.anjou.terraraq.org.uk> MIME-Version: 1.0 Content-Type: text/plain;charset=us-ascii Content-Transfer-Encoding: 7bit From: rjk@greenend.org.uk To: rjk@greenend.org.uk Subject: Welcome to DisOrder Date: Mon, 31 Dec 2007 11:28:58 +0000 Welcome to DisOrder. To active your login, please visit this URL: http://test-jukebox.anjou.terraraq.org.uk/index.cgi?c=dGVzdDI7grD03J4rYQIN1w**
The URL is a little on the long side but I'm guessing most installs won't have quite such long hostnames. After visiting the confirmation URL you are automatically logged in.


(no subject)
Date: 2007-12-31 12:01 pm (UTC)What, no J, U or W allowed? :-) (also, should be 'digits').
(no subject)
Date: 2007-12-31 12:15 pm (UTC)