Forum OpenACS Development: Policy on changing username
Is this at all possible?
Do anyone know of public sites that use usernames, and let users change their username?
If we do allow it, we have t these concerns:
A) if you're a local OpenACS user, we should make sure there are no other local OpenACS users using the same username.
B) if you're a remote user, we should make sure you can successfully authenticate against that remote server.
Here are the options:
1) Usernames cannot be changed
2) Site-wide admins can change usernames
3) Local users can change their usernames, remote users cannot, but site-wide admin can change the usernames for them.
4) All users can change their username, but remote users have to re-authenticate.
5) Something else?
It seems to me that this would be a minimum level of desired functionality; people do sometimes regret the cutsie username they picked before they cared about their standing in the community. :) And of course e-mail addresses do change as well. It would be better if users could do this themselves, but I think it's important that admins are able to do it.
I haven't given any thought to authentication issues so I won't comment on that aspect.
If it's an email address (as currently), it would seem sensible (even essential) to allow all/any user to change it, and I would strongly consider re-authenticating in this case (i.e. email verification) to safeguard against mistakes. Of course, the system should check first to see if that address is already in use!
If it's a username (presumably tied to an email address), I see it as less of an issue - check the username is not already used, and let any user change it.