RE: [Rainbowportal-devel] RE:User Information and Collapsable Windows

[Geert A. <gee...@sy...>]

Hi Bill,

Encrypting the password is not necessary. What could be interesting is
that we store a Hash of the password instead of the password itself. We
someone logs on you just have to hash to password he used for
authenticating and compare this hash with the stored hash. The advantage
of such a senario is that you don't have to store a key, and that you
can't go back from the hash to the original password. This is a genral
procedure for storing passwords.

Greetz,

Geert

*******************
Geert Audenaert 
Syntegra, creating winners in the digital economy
+32 2 247 92 20 - check us out at www.syntegra.be
*******************

 


-----Original Message-----
From: rai...@li...
[mailto:rai...@li...] On Behalf Of
Bill Anderson
Sent: donderdag 22 mei 2003 5:30
To: rai...@li...
Subject: [Rainbowportal-devel] RE:User Information and Collapsable
Windows



Folks:

Subject: User List and Collapsable Windows

**********************  User List **********************

I am starting to look at the User List information and
while I'm here I want to make some changes to the User information.
However, this may collide w/ work being done w/ the HR section.
So , I'll list what I'm doing so that I'm not crossing paths.
Please note that I would also like to encrypt the password but
I'm not going to include it in this version. I have some code
that will encrypt/decrypt based on a key (symmetrical) ...

Here is what I wish to do.

1) Augment rb_User
	* Add Reports_To, Department, LastActivity, Title, HireDate,
ModifyDate,
Timezone
	* Split Username to First Name, Middle Initial, Last Name

2) Add a rb_Department with the appropriate data -- I would just
   create the table and populate w/ a default department. Used by the
   department in the change to rb_User

3) Add an rb_AnonymousUsers to support the last activity as well as
   being able to track user information ( like aspnetforums )

4) Create a User class for the Presentation Layer as this will be easier
   to deal with ( less coupling ) that the DB.

I figured while I'm down in this I might as well add the hooks for the
other pieces that fit in ( AnonymousUsers , Departments )

Speak now, as I would like to start cranking. Also, I just added the
collapsable windows ( it's not set by default ). Hopefully, it's
all there ; I did run into a number of conflicts when checking in :(
Since this is my first time checking into the CVS and the Rainbow
portal forgive my awkwardness.

********************** Collapsable Windows ************************

Briefly about the collapsable windows.

1) You can enable via the web.config. Doing so may or may not get you
   a min/max button ( close is turned off but can be turned on as well
   via the web.config -- I elected to disable the button bec/ once you
   delete it you have no way to get the module back except for deleting
the
   item from the DB. I'll have to write a module for this ).
2) Min/Max button can be enable/disable on a per module setting. You
need
   to edit your property pages and check 'Can Collapse Windows?"  to
activate it.
3) I wanted to set a min. color ( for visual indication ) but the Theme
changes
   would take more changes than I cared to at this time; though, I added
   a minimize color in the Themes.xml ( respectively) for the future.
4) The Buttons (min/max/close) are ALL the same for each Theme. I did
not
   have the time to change it to fit each theme.
5) Once you log on ( authenticated) you will see a 'Save Desktop' next
to
   the logoff. Selecting this button will cause your module settings to
be
   saved to the DB. If nothing has been minimized/closed then nothing is
   saved.
6) By default I used a Cookie Bag for holding user information though it
can
   use a Session Bag (if enabled) or an Application Bag ( fallback) if
necessary. The
   way I hold information for the user ( the bag type ) may change. I
may
   add a DB bag as well.
7) I added an sql script to update the Db but I named it 1713.sql which
may
   not have been correct. Sorry .
8) If you see issues/problems let me know.

-billa




-------------------------------------------------------
This SF.net email is sponsored by: ObjectStore.
If flattening out C++ or Java code to make your application fit in a
relational database is painful, don't do it! Check out ObjectStore.
Now part of Progress Software. http://www.objectstore.net/sourceforge
_______________________________________________
Rainbowportal-devel mailing list
Rai...@li...
https://lists.sourceforge.net/lists/listinfo/rainbowportal-devel