[pmwiki-users] Rethinking passwords and authorization

[Patrick R. Michaud]

On Tue, Oct 10, 2006 at 11:16:32AM +1000, Kathryn Andersen wrote:
> On Mon, Oct 09, 2006 at 04:29:33PM -0500, Patrick R. Michaud wrote:
> > The above looks clean, but we start to run into difficulty
> > when people expect to be able to mix the syntax at will:
> > 
> >     id:alice,bob, at authors quick
> 
> I think it would be simpler to just insist that it not be mixed like
> that; make the above
> 
>         id:alice,id:bob, at authors,quick

I agree this is simplest -- I just know that some people have
difficulty following a restrictive specification.  Put another way,
when they see

    id:alice,bob @authors 

they can't figure out why neither alice nor bob are being
allowed access to the page.

> ...
> But you would have to insist that passwords and names couldn't have a
> comma or quote in them.

Passwords w/commas and quotes aren't a problem.  I don't have a real
issue with restricting names to not allow commas.

Pm