Comments (2)
References:
- https://codewithoutrules.com/2018/09/21/users-considered-harmful/
- https://twitter.com/jagthedrummer/status/1037812206602252291
- internal Caravan feedback about users in django (hi @mathieuhentges)
Code Without RulesYou’re six months into a project when you realize a tiny, simple assumption you made at the start was completely wrong. And now you need to fix the problem while keeping the existing system running—with far more effort than it would’ve taken if you’d just gotten it right in the first place. Today I’d like to tell you about one common mistake, a single word that will cause you endless trouble. I am speaking, of course, about “users”. There are two basic problems with this word: “User” is almost never a good description of your requirements. “User” encourages a fundamental security design flaw. The concept “user” is dangerously vague, and you will almost always be better off using more accurate terminology.
“Pro tip for saas builders: Users and Accounts should be different things from day 1. Accounts own the stuff, and Users sign in to work in (one or more) Accounts. Splitting later can be hard for anything but the simplest of apps.”
edit I think I misinterpreted the second link. It’s not about naming user vs. account, but about tenancy in SaaS (ownership of created resources) in the context that workers leave companies and that should not mean losing access to stuff.
from rest-framework-auth-toolkit.
Another item. At the moment the signup endpoint is open, and creates a User before confirmation. This could lead to bots flooding the database.
from rest-framework-auth-toolkit.
Related Issues (20)
- Update required Python and Django versions
- Dependabot couldn't authenticate with https://pypi.python.org/simple/
- Things missing for easier integration HOT 2
- Dependabot couldn't find the branch master
- Apply django password validators
- Set up i18n
- django 2 compatibility HOT 3
- Package with flit HOT 3
- Add google login
- Add functional tests using webtest and demo app HOT 1
- Fix facebook login
- Rework email confirmation HOT 3
- Add logging
- Centralize default values for settings
- Add Sphinx doc with Readthedocs
- Rename project
- Add django checks to detect misconfiguration
- Dependabot can't resolve your Python dependency files
- Test with multiple django versions
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from rest-framework-auth-toolkit.