On 29/07/13 14:08, Ash Moran wrote:
On 29 Jul 2013, at 11:51, Kevin Rutherford <[email protected]>
wrote:
Another way to look at it might be to say that User is a role played
by a Person via a UserAccount. It seems to me that I am not the same
as my UserAccount on any of the applications I use. My accounts have
usernames, but I don't.
Actually that's almost where I'm at. I have a Fisherman which represents the
person in the game, and in fact I wrote this first, long before I thought about
authentication. Probably I should have called my User class UserAccount and it
would be more obvious then. There's a possibility I'll write computer players
too, in which case I could end up with at least Fisherman, Person, and
UserAccount. There complication there will be that a computer Fisherman will
still need a name in the game like a person, but it won't need an account to
log in.
I haven't added anything yet where Fishermen need to communicate with each
other, so maybe that will be the demand for holding a name of some sort.
Cheers
Ash
It's an interesting topic to consider, and good to challenge (what seem
to be) our collective natural assumptions (i.e. of course you should
store a username).
It reminds me of the concept of Translucent Databases - the idea that
while you need something to be able to key against (like the username)
or to be able to verify (like a password), you don't always need to
store (or even find out, if there's some hashing done on the client end)
the data in its unencrypted form. It's what we effectively do with
passwords, where we only store the hashed and salted version, but the
concept doesn't seem to extend to other things that we put into our
databases.
Jon Udell is the only person I've seen talking about it - e.g.
<http://www.wired.com/cloudline/2012/03/the-translucent-cloud/> - but
it's something I wish I remembered to do more of and was more widely known.
Cheers,
Adrian.
--
You received this message because you are subscribed to the Google Groups
"NWRUG" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/nwrug-members.
For more options, visit https://groups.google.com/groups/opt_out.
