mit-model-open-data-and-identity-system / sensibledata-platform Goto Github PK

We need to add at minimal the link to email with forgotten your password, and implement the proper reset mechanism in the meantime.

We should have a nice ajax-based update of the permissions, so when I authorize from my phone or different place, it is reflected.

Make the formatting look nice.

Some texts are already separated into documents, but we should push it forward and split headers, and bigger texts into separate docs.
Generic in devel and master, and then specific in production repos.

We should delete the db on production, syncdb, config, make it a fresh start.

Right now the field is validated every with key press. Would it be possible to validate it only on leaving focus? It seems that we have at least one user, who thinks her email is invalid without even finishing typing...

IE 9 does not display the grey text in textfields, so when a user wants to register three empty fields are displayed. The user does not know what to enter in each.

We should have all the buttons/labels/UI elements translated to Danish and English.

Please stat with https://docs.djangoproject.com/en/dev/topics/i18n/translation/ and mark all relevant strings for translation. Then we will have them translated to DA/EN.

We need social registration and login for the platform. For the ESOF deployment we need at least Facebook registration.
We need to add another registration page template (in a perfect world we will have wrappers allowing adding/removing registration options, see http://janrain.com/products/engage/social-login/), where we will allow user to register with Facebook. Each such wrapper should be a standalone piece of code that exposes the registration/login url and ends up with user registered/logged in.

Also login page should be switched to 'login with Facebook'.
For ESOF we will NOT support username/password registration & login.

The registration/login wrappers should be re-usable for Profile page (where CAS is right now).

Requested scopes, privacy policy, icon etc....

On the profile page right now CAS is hardcoded to be displayed. This should be changed to be generated based on available identity providers and configuration of the deployment.
See also #22

We want a nice status page accessible only to staff (or maybe whitelisted users) that will show the status of platform.

We should write down the flows to test and run them on current 0.0.4.

In the registration screen:
the user enters a password: 123456
confirms the password as 1234567 (added one letter)
goes back to password to add the letter
The Register button is not enabled even though the email is correct and the passwords match

We need to fix footers, copyright, creative commons

Should we have a separate app for research access to the data?

Test that the facebook data wrt work info is encrypted correctly

We need to limit login rate to prevent brute force attacks.
Delay in sending the response.
Blacklisting ip.

There is something wrong when using the login screen in the data collector app, the keyboard behaves strangely. Revisit login screen.