Guest Favorites Merged For All Guest

[Phil -- wbtc.fr --]

Hi,

tested on all v5.x.x:

1. authorize favorites for guest users in admin, for example in news section
   
2. click on a news to put it as favorite, without begin logged (you will see the broken heart, meaning it's added)
   
3. go to another computer, display the same news, you'll see it's added as favorite on this other computer

The same thing happens wether it's another computer, browser, different IP... Then I can guess that favorites for guests are not stored in a cookie, but rather in a session?

p

[Alexander Obuhovich]

Does Guest user have "FAVORITES" permission?

Do you test on clear installation or on your project?

--
You received this message because you are subscribed to the Google Groups "In-Portal Bugs Team" group.
To post to this group, send email to in-port...@googlegroups.com.
To unsubscribe from this group, send email to in-portal-bug...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/in-portal-bugs?hl=en.

--
Best Regards,

http://www.in-portal.com
http://www.alex-time.com

[Dmitry A.]

No Alex, it's OFF by default.

It's Phil who wants to use it for Guests :)

Sorry Phil, but we don't have the ability to track Users without the Login. It's kind of possible to store this in Cookie or depend on IP, but it's VERY insecure which is why we are NOT even considered it in the past.

I hope it makes sense to you too.

DA

[Phil -- wbtc.fr --]

Yes Dmitry, it's OFF by default, and Yes Alex I activated it.

Many websites permits to add favorites even if you are not logged in, and I don't see any security threat to use a cookie for this... How do they do on other websites, which have thousand of visitors per hour? We can't stick on this kind of statement when the web usage is different...

Do you need examples? Youtube, Google... and many other big audience websites

2011/1/24 Dmitry A. <dand...@gmail.com>

--

[Alexander Obuhovich]

So Dmitry was right, you need for Guest users to have favorites :)

That would be a feature then, since I'm not considering it's a bug in current favorite tracking system. It's just another viewpoint for an existing system.

[Phil -- wbtc.fr --]

Yes I need it, but I was thinking as a big, as we can set a permission which finally don't work ;-)

The main thing is to give user the willing to come back on the website again, and maybe sign later, better than never...

2011/1/24 Alexander Obuhovich <aik....@gmail.com>

[Dmitry A.]

Hi Phil,

Yes, we have nothing against this feature. I personally see it as a pretty cool thing and really would be glad to finalize the specs (we still not sure how it's done, either via cookie or something else) and then put it on the TODO list along with others (you know we have plenty). By the way, what is the best example website for this?

Phil, you are welcome to participate in development or sponsor the development of this feature in case if it's so critical to your project.

Thanks for your input!

DA

[Alexander Obuhovich]

For technical viewpoint we can do something like this:

• generate random cookie for user computer (when missing)
• add UserCookie column to Favorites table
• when Favorite is added, then also store UserCookie value with it
• when Favotite is removed, then check, that UserCookie of Favorite matches the one from user computer
• check if guest has a cookie based on that UserCookie value

This way:

• check for logged-in users is made using: Favorites.PortalUserId = <LoggedInUserId>
• check for non logged-in users is made using: Favorites.PortalUserId = GUEST AND Favorites.UserCookie = <UserCookieHere>

Theoretically we even will be able to list all current guest favorites in "My Favorites" section if it won't be set as login-required.

Then, after user is registered/logged-in from that computer we can do several things:

• store UserCookie in PortalUser table
• show Favorite list (when logged-in) combined:
• based on user cookie
• based on user id

This way, when user presses Logout button, then he still will see favorites he used to add, while being non logged-in.

DA

--

You received this message because you are subscribed to the Google Groups "In-Portal Bugs Team" group.
To post to this group, send email to in-port...@googlegroups.com.
To unsubscribe from this group, send email to in-portal-bug...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/in-portal-bugs?hl=en.

[Phil -- wbtc.fr --]

Alex,

thanks for fast reply on this. It seems good as you describe it. Dmitry, this is not critical (critical things are problems like broken shipping engine), and I could wait for a task.

I agree on Alex's proposal.

p

2011/1/25 Alexander Obuhovich <aik....@gmail.com>

[Dmitry A.]

Hi Phil,

Yes, thank you for pointing out on shipping issues once again. We are looking into this trying to pin point the problem. I have a feeling that patch should available soon.

Alex, I am still checking on your solution and what's available on the web so we can compare the approaches.

Cheers!

DA

[Phil -- wbtc.fr --]

I was thinking about a local in-cookie favorites storage...

2011/1/26 Dmitry A. <dand...@gmail.com>

DA

--

[Alexander Obuhovich]

Maybe we can implement site-wide guest activity tracking. For example we can remember user cookie used in all records being created (along with CreatedById field) and then, after user registers and uses the same cookie, then we can assign that created items to him.

[Phil -- wbtc.fr --]

This sounds a very good idea !

2011/1/26 Alexander Obuhovich <aik....@gmail.com>

[Dmitry A.]

Hi Alex,

I have read through your notes and see it's a clever plan!

Would you please create a feature request from this discussion.

Cheers!

[Alexander Obuhovich]

Task: http://tracker.in-portal.org/view.php?id=989

--

You received this message because you are subscribed to the Google Groups "In-Portal Bugs Team" group.
To post to this group, send email to in-port...@googlegroups.com.
To unsubscribe from this group, send email to in-portal-bug...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/in-portal-bugs?hl=en.