| Author |
 Topic Search  Topic Options
|
djlurchg 
Groupie
Joined: 31 March 2006
Status: Offline
Points: 40
|
 Post Options
 Thanks(0)
 Quote  Reply
 Topic: Wishlist: Log On As
Posted: 12 April 2006 at 7:46pm |
|
I provide support for multiple websites. When providing phone tech support I always like to walk the person through the application step by step. It is nice to be able to see EXACTLY what they are seeing and to be able to see how their account settings affect what they see. To do this I often log using their credentials.
In the appications that I develop, I usually include a "Log On As" button in their account details page.
Is there any chance wwf could implement this?
As it stands, to log on as I have to edit the users profile, change their password and then log on as them. This obvioulsy requires the user to change their password when they log on.
The universal rule that users have been told is: Don't give your username out to anyone over the phone. This is because the application service provider should know the account details and have access to it. The problem with the new security model is that we DON'T have access to the passwords because they are encrypted database fields.
Is there a solution?
|
 |
WebWiz-Bruce
Admin Group
Web Wiz Developer
Joined: 03 September 2001
Location: Bournemouth
Status: Offline
Points: 9844
|
Post Options
Thanks(0)
Quote Reply
Posted: 13 April 2006 at 10:22am |
|
Such a scheme not only proves a security risk but is not necessary in Web Wiz Forums.
When logged in as admin at the bottom of each users profile to edit the users settings.
By clicking this button the admin has access to the users forum settings from where you can change any of the users forum settings and a few others that the members themselves don't have.
|
|
djlurchg
Groupie
Joined: 31 March 2006
Status: Offline
Points: 40
|
Post Options
Thanks(0)
Quote Reply
Posted: 13 April 2006 at 5:46pm |
|
"Not Necessary"
According to who? Last time I checked you were designing the software for other people, not yourself. I've implemented many features in my software which my users have asked for, but I don't agree with.
Why is it a security risk?
|
|
WebWiz-Bruce
Admin Group
Web Wiz Developer
Joined: 03 September 2001
Location: Bournemouth
Status: Offline
Points: 9844
|
Post Options
Thanks(0)
Quote Reply
Posted: 13 April 2006 at 6:09pm |
|
No one has asked for this before in over 5 years, last time I asked for suggestions I got over 1000, if they where all to be implemented not only would the forum perform badly, but it wouldn't be finished to some time around 2020
Maybe you need to develop this yourself as a mod, as I can only add thoes things to the software that there is demand for from a number of people, not just individuals.
Edited by -boRg- - 13 April 2006 at 6:09pm
|
|
djlurchg
Groupie
Joined: 31 March 2006
Status: Offline
Points: 40
|
Post Options
Thanks(0)
Quote Reply
Posted: 13 April 2006 at 6:15pm |
|
borg,
That's actually a great idea.
I can understand about not being able to implement every feature. That's why I prefaced the post title with Wishlist :)
In the previous versions the mod would have been trivial to do. I haven't looked at the logon code at all, only the backend database values. I will take a look and see what's going on in the codebase.
|
|
