[Design] [Scooby] Anonymous access to read-write tickets and security concerns

Brian Moseley bcm at osafoundation.org
Wed Jul 12 17:02:33 PDT 2006


On 7/12/06, Mimi Yin <mimi at osafoundation.org> wrote:
> because we wouldn't have to solve the workflow problem of
> coordinating shares sent to different email accounts into a single
> cosmo account.

why is this a workflow problem?

say i have already created my account with the address
'bcm at osafoundation.org'. then somebody shares a collection to me with
'bcm at maz.org'. when i click the share url in the email to access the
calendar, cosmo/scooby asks me to log in. when i log in, cosmo
associates that email address with my account and takes me to the
calendar.

say i haven't already created an account. when i click the share url
in the email, cosmo/scooby asks me to register an account with the
email address that was used to share to me. i do so and am taken to
the calendar.

is this really problematic?


More information about the Design mailing list