How can I stop notification in User Profile.
hankpalan.com - March 18, 2008 - 21:06
| Project: | Persistent Login |
| Version: | 6.x-1.x-dev |
| Component: | User interface |
| Category: | feature request |
| Priority: | normal |
| Assigned: | Unassigned |
| Status: | active |
Jump to:
Description
This module is showing this massive text in the user profile.
You have 1 persistent login session(s) created with the "Remember Me" login option on this site. If you no longer trust the computer(s) on which these remembered sessions were created or think your account has been compromised for any reason, you can erase persistent logins now. This will not log you out of your current session but you will have to provide your username and password to log in the next time you visit this site.
Can there be an option to not show that to certain roles?
#1
you can completely customize the user profil by creating a user_profil.tpl.php in your theme directory. Then you may put whatever you want for the persistent login
#2
Documentation on user-profile.tpl.php
http://api.drupal.org/api/file/modules/user/user-profile.tpl.php/6
Copy that file from user module to your theme directory and override. Here's an example:
<?phpforeach ($profile as $key => $content) {
if ($key != 'security') {
print $content ."\n";
}
}
?>
The roles for the account being displayed can be found here:
$account->roles, so you can check for that in your user-profile.tpl.php override.Though I agree that this is technical information that many users may not understand. I looks like the one who needs to be concerned about the fact that an account could have been compromised in not the user itself. This is more the job of the site admin or the one who takes care of security issues for the site, I think. So, if there's information logged into watchdog about possible attacks, then this information displayed on the user profile page could be really not needed at all.
So the ability to provide a method to hide this information makes sense. Maybe this could be implemented in module settings, with checkboxes for user roles where admins could check which roles can see this information. Sounds good?
#3
So I'm turning this into a feature request.
#4
This is a reasonable idea. However, we do need to preserve a way for users to erase their Persistent Logins, and if we just put an "erase" link on the user profile page with no explanation, people will get very confused. So, an option to hide the verbose text needs to be a way to preserve erase and its explanation.
Or maybe we can do away with the erase feature and always wipe all PL sessions for a user when any of the sessions clicks 'logout'. Thoughts?
#5
How does every other website on the internet handle the "remember me" checkbox? It is extremely common to have that checkbox on a website, but I never bothered to check to see how it functions.
It would make sense to have it cleared when you logged out. I don't understand why they need the option to erase it if they checked the box. Just do like all the other sites, put a question mark next to the "remember me" text explaining what it does. They then understand the implications of checking the box. Then wipe there session when the log out like #4 bjaspan suggested.
#6
+1 for this feature. I think that clearing the login when a user clicks 'logout' would be an acceptable option as an alternative to the current text.
#7
Anything here will be done for D6 first.
One possible way to help here would be if the message displayed on the user profile was not so techie. Any suggestions?
#8
Well, access to this information could be controlled with a new option in the module settings panel that allows site admins choose which roles can, enabled by default to authenticated users. Those that have a user base that do not understand all these matters, for whatever reason, can simply revoke the permission. Maybe the user base of certain sites only care about the ability to use the "Remember Me" option when login and that's all.
Also, I would like to add a new setting to enable/disable the list of persistent logins in the user's page, so that they can monitor the dates when the logins where created, or even last used, and admins could also see the IPs for both events. This would require adding more columns to the {persistent_login} table.
Any objection to this approach?
#9
So if a set of users can only use the "Remember Me" option would there still be a notification in their user profile?
If you are still looking for simplified text, here is a suggestion:
"Because you selected "Remember Me" when logging into this page any user of this computer will be able to access your acount. Clicking logout to reset your login will require you to login again the next time you come to this site."