Tag Info

New answers tagged

1

Neither approach If possible, settings should be on one page, and you should not have to re-enter your password. There are several ways to do this. Here are two: In the second approach, the password form is hidden and is displayed when the user wants to change the password.


1

This depends on the level of security you require. Perhaps you can conditionally require the password depending on which fields the user has altered?


2

The simple answer is that it is *assumed that the whitespace was unintentional." I agree fully that spaces are very useful for increasing the password's entropy BUT I think this is a very useful compromise as many people cut and paste passwords and would be frustrated if they were not able to gain access to their site. Re the issue of password security ...


2

This behavior should not pose any issue. The sites that trim passwords will trim them both on initial entry and on use, those that do not will not. If you use spaces in your password, and they are trimmed out, you won't even notice. Using spaces in the password does not enhance security any more than using any other character instead of space. But knowing ...


56

Good observation. In my experience this happens for a number of reasons, some intentional and some unintentional. Intentional reasons to trim whitespace: Users often cut and paste passwords (yes, use of Notepad as a password manager really happens) and the paste operation for some clients adds a whitespace. Phrase (multi word) passwords are ...


4

I agree with Ranjan's answer that you want to see the website as close to reality as possible. Thus keeping the user profile and logout link in tact and add a topbar as indication that you're in an impersonating mode. download bmml source – Wireframes created with Balsamiq Mockups You can give the impersonating user a clear explanation on how ...


2

Having implemented this feature a few times, I have found the cleanest solution to be "exec" instead of "sudo". Steps: Power user logs in. Power user accesses "login as" feature. Power user types Target user username. Power user clicks submit button. Page boots, sees Target user in session, execute Auth::login(target). App now behaves as though Target ...


8

For administrator or testing mode, the testers usually want to be able to see the website as closely as possible to the user's point of view. One way to do this is to just highlight the top nave bar a different color (like red or green) so that the tester knows the browser is in impersonation mode, but all everything else is the same so they are seeing ...


7

Type of impersonation Interesting question! how exactly this might look will depend on the aim of impersonation and the relationship between the impersonator and impersonated. Few questions might be helpful in devising the right approach: For example, is the impersonation feature required for social networking product or for an enterprise solution? Is it ...


4

I would do this through the combination of a pretty obvious UI state change and a change in wording. For example, if your header is normally white when you're logged in as you, change it to bright orange to indicate a difference in status. Similarly, you could also just stick a bar over the top of the UI like this. As for the wording, maybe something like ...



Top 50 recent answers are included