Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Should be possible to pick a peg but do not list the shortcodes in the front page #5

Open
renatomefi opened this issue Sep 1, 2016 · 5 comments
Milestone

Comments

@renatomefi
Copy link
Member

Currently we are exposing all the peg shortcodes in the front page, which means anyone can add anything to any peg!

We could create a secret ID which allow to look at it but doesn't allow to change it's info!

@renatomefi renatomefi added this to the 1.0.0 milestone Sep 1, 2016
@toby-griffiths
Copy link
Contributor

Perhaps using the UUID in the URLs, rather than the shortcode, and just use the shortcode when searching?

@renatomefi
Copy link
Member Author

That could be a good solution! :)

This way only the ones with the short code can add information!

@toby-griffiths
Copy link
Contributor

And with rate limits on the API, this will prevent people trawling the peg list. Perhaps we need to hide the recent pegs endpoint from regular users?

@renatomefi
Copy link
Member Author

We can either hide it or hide the shortcode and expose the uuid, and instead of pegs we can take the events themselves

@toby-griffiths
Copy link
Contributor

I see a possibly problem in that photos of the peg may reveal the peg's shortcode anyway, if it's written on them. I guess that's a risk though.

A possibly alternative might be to assign pegs to users, but allow users to "release" pegs to a new owner if they pass them on… or maybe ask the owner's permission if anyone else wishes to post on their timeline?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants