Problem/Motivation

Currently, accounts that fail validation are blocked after an hour of continuous validation failure. This leaves the only way for a user to have their account re-instated to be an email to help@drupal.org and B_man and fjgarlin are the only folks who can help.

Steps to reproduce

Create account with JS disabled and wait an hour.

Proposed resolution

Instead of blocking accounts, put up a more intrusive message (potentially an automatic redirect) with instructions on how to pass validation, and if validation continually fails pop up a text box asking about their intentions for the account they are creating where we will then take that input and send it to help@drupal.org in a format that facilitates easier resolution of their issue.

Remaining tasks

Code it up

CommentFileSizeAuthor
#2 access_denied.png24.74 KBgisle

Issue fork drupalorg-3395526

Command icon Show commands

Start within a Git clone of the project using the version control instructions.

Or, if you do not have SSH keys set up on git.drupalcode.org:

About issue forks
Support from Acquia helps fund testing for Drupal Acquia logo

Comments

B_man created an issue. See original summary.

gisle’s picture

gisle
he/him
Primary language Norwegian Bokmål
Location Norway
CreditAttribution: gisle at Hannemyr Nye Medier AS for Ramsalt Lab commented
Related issues: +#2593529: Allow spam fighters access to blocked accounts
FileSize
access_denied.png24.74 KB

One of the problems with this validator is not reliable.

I am using the latest version of Firefox on MS Windows 10 to visit Drupal.org, and:

  • I don't use any automated tools to browse.
  • I have Javascript enabled.
  • I don't use any ad blockers.
  • My browser supports cookies.

But at least once a month, when I browse Drupl.org, I get this:

Access denied popup

So far. pressing and holding has saved me from being blocked, but this "validator" obviously has some issues.

In the issue summary, one of the problems identified is this:

the only way for a user to have their account re-instated to be an email to help@drupal.org and B_man and fjgarlin are the only folks who can help.

In the proposed solution it says:

pop up a text box asking about their intentions for the account they are creating where we will then take that input and file an issue for the account in question

I think that this is an excellent idea, but I can't see how it improves the bus factor. If the issue is filed in the site moderator's issue queue, a lot more people than the two who currently is able to resolve it will see the problem, but none of them shall be able to resolve it. Site moderators does not have the ability to unblock users, see this related issue #2593529: Allow spam fighters access to blocked accounts.

drumm’s picture

drumm
he/him
Location NY, US
CreditAttribution: drumm at Drupal Association commented

gisle - this issue is actually about a completely different anti-abuse measure.

B_man opened merge request !208

B_man’s picture

B_man
he/him
Location California, USA
CreditAttribution: B_man at Drupal Association commented
Issue summary: View changes
B_man’s picture

B_man
he/him
Location California, USA
CreditAttribution: B_man at Drupal Association commented
Issue summary: View changes

  • drumm committed b96652b8 on 7.x-3.x authored by B_man 
    Issue #3395526: Block navigation on browser checking instead of messages...
drumm’s picture

drumm
he/him
Location NY, US
CreditAttribution: drumm at Drupal Association commented
Status: Active » Fixed

This is now deployed

  • B_man committed 3eea5850 on 7.x-3.x 
    Issue #3395526: Send message from account

  • B_man committed 3eea5850 on d7-eol-view-update 
    Issue #3395526: Send message from account

  • drumm committed b96652b8 on d7-eol-view-update authored by B_man 
    Issue #3395526: Block navigation on browser checking instead of messages...

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.