Tag Info

New answers tagged

4

For administrator or testing mode, the testers usually want to be able to see the website as closely as possible to the user's point of view. One way to do this is to just highlight the top nave bar a different color (like red or green) so that the tester knows the browser is in impersonation mode, but all everything else is the same so they are seeing ...


4

Type of impersonation Interesting question! how exactly this might look will depend on the aim of impersonation and the relationship between the impersonator and impersonated. Few questions might be helpful in devising the right approach: For example, is the impersonation feature required for social networking product or for an enterprise solution? Is it ...


2

I would do this through the combination of a pretty obvious UI state change and a change in wording. For example, if your header is normally white when you're logged in as you, change it to bright orange to indicate a difference in status. Similarly, you could also just stick a bar over the top of the UI like this. As for the wording, maybe something like ...


0

I would say no, but use sub-accounts if you really need that functionality. I think it can be confusing to the users unless your site supports sub-accounts. Netflix.com has a single authentication account, but there are sub-accounts that support different user preferences profiles. This puts everything out in the open for users. They'll need to give the ...


10

I agree with Turch’s answer that allowing multiple user accounts per email address can be a good idea, but I don’t think that a 'less usable' 'special "Recover username"' feature is needed, and I don’t agree with Benny Skogberg’s reasoning that a password reset would require resetting all passwords. Scenario: On Example.com, two accounts are registered with ...


42

Yes! There are no security problems. If two people share an email account, and one of them has an account on your site, either of them can reset the password on the account (since they both have access to the place where the "forgot username" and "forgot password" emails get sent). Both people have the ability to take control of the account, and that's ...


64

No! You can't send "forgotten password" links to a single account if you have the same e-mail address, unless the user specifies a unique username. But what happens if the user forgets the username as well? Then you need to reset password on all accounts associated with the e-mail address.



Top 50 recent answers are included