{"action":"created","issue":{"url":"https://api.github.com/repos/DoSomething/northstar/issues/358","repository_url":"https://api.github.com/repos/DoSomething/northstar","labels_url":"https://api.github.com/repos/DoSomething/northstar/issues/358/labels{/name}","comments_url":"https://api.github.com/repos/DoSomething/northstar/issues/358/comments","events_url":"https://api.github.com/repos/DoSomething/northstar/issues/358/events","html_url":"https://github.com/DoSomething/northstar/issues/358","id":155976453,"number":358,"title":"Support multiple values for email/mobile field per user.","user":{"login":"DeeZone","id":2119264,"avatar_url":"https://avatars.githubusercontent.com/u/2119264?v=3","gravatar_id":"","url":"https://api.github.com/users/DeeZone","html_url":"https://github.com/DeeZone","followers_url":"https://api.github.com/users/DeeZone/followers","following_url":"https://api.github.com/users/DeeZone/following{/other_user}","gists_url":"https://api.github.com/users/DeeZone/gists{/gist_id}","starred_url":"https://api.github.com/users/DeeZone/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/DeeZone/subscriptions","organizations_url":"https://api.github.com/users/DeeZone/orgs","repos_url":"https://api.github.com/users/DeeZone/repos","events_url":"https://api.github.com/users/DeeZone/events{/privacy}","received_events_url":"https://api.github.com/users/DeeZone/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/DoSomething/northstar/labels/question","name":"question","color":"cc317c"}],"state":"open","locked":false,"assignee":{"login":"DFurnes","id":583202,"avatar_url":"https://avatars.githubusercontent.com/u/583202?v=3","gravatar_id":"","url":"https://api.github.com/users/DFurnes","html_url":"https://github.com/DFurnes","followers_url":"https://api.github.com/users/DFurnes/followers","following_url":"https://api.github.com/users/DFurnes/following{/other_user}","gists_url":"https://api.github.com/users/DFurnes/gists{/gist_id}","starred_url":"https://api.github.com/users/DFurnes/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/DFurnes/subscriptions","organizations_url":"https://api.github.com/users/DFurnes/orgs","repos_url":"https://api.github.com/users/DFurnes/repos","events_url":"https://api.github.com/users/DFurnes/events{/privacy}","received_events_url":"https://api.github.com/users/DFurnes/received_events","type":"User","site_admin":false},"milestone":null,"comments":9,"created_at":"2016-05-20T14:31:19Z","updated_at":"2016-05-25T15:35:57Z","closed_at":null,"body":"The assumption that a user will use the same email or mobile number indefinitely is not correct. Support for users changing these addresses while maintaining the relationship with the specific user of each address - past and present is needed. There may even be cases where more than one email or mobile number will be in active use with the need to understand that it's all the same person.\r\n\r\n**Discussion from #data**:\r\nhttps://dosomething.slack.com/archives/data/p1463695844000049\r\n\r\n**Darren \"Dee\" Lee**\r\n\r\n> `@nmccormick`: `@dave` `@matt` `@andrea` What should happen if a user signs up through Niche and provides an email and mobile number and one already exists in Phoenix? When attempting to create a Drupal user and there's an existing user found with the mobile number but the email is different the user creation is prevented.\r\n\r\n> Ideally the old address is maintained historically as a revision on the account but the email address gets updated which means that the MailChimp email address will also need to be updated.\r\n\r\n> I don't think we've thought through the fact that the same user can change their email and / or mobile number through time. The concern is a loss of the relationship between the different contact addresses which currently appears as two different users.\r\n\r\n> For the sake of processing current Niche users I'm considering just dealing with this situation as an existing user and not updating anything. Unfortunately this will result in us trying to communicate with the user using the old address.\r\n\r\n> OR the email address is updated and we loose the relationship and MailChimp is sending to an old account.\r\n\r\n> When we get support for changed contact addresses that maintains old values / relationships with our various services we can rerun the Niche data to build the historical relationships.\r\n\r\n> Make sense? Thoughts?\r\n\r\n**Dave Furnes**\r\n> I don’t think we should be changing credentials (email, mobile) on an existing account without the user’s explicit permission. Could potentially be a way for a malicious user to steal an account.\r\n\r\n> For cases where user changes one of those fields, as long as we only rely on the primary key (Northstar ID) this shouldn’t cause any issues. We should never be using email or mobile as a primary identifier for a user.\r\n\r\n> And yeah, if/once Northstar is responsible for maintaining those other service relationships it should definitely update any connected profiles using a mutator on those fields."},"comment":{"url":"https://api.github.com/repos/DoSomething/northstar/issues/comments/221615044","html_url":"https://github.com/DoSomething/northstar/issues/358#issuecomment-221615044","issue_url":"https://api.github.com/repos/DoSomething/northstar/issues/358","id":221615044,"user":{"login":"DFurnes","id":583202,"avatar_url":"https://avatars.githubusercontent.com/u/583202?v=3","gravatar_id":"","url":"https://api.github.com/users/DFurnes","html_url":"https://github.com/DFurnes","followers_url":"https://api.github.com/users/DFurnes/followers","following_url":"https://api.github.com/users/DFurnes/following{/other_user}","gists_url":"https://api.github.com/users/DFurnes/gists{/gist_id}","starred_url":"https://api.github.com/users/DFurnes/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/DFurnes/subscriptions","organizations_url":"https://api.github.com/users/DFurnes/orgs","repos_url":"https://api.github.com/users/DFurnes/repos","events_url":"https://api.github.com/users/DFurnes/events{/privacy}","received_events_url":"https://api.github.com/users/DFurnes/received_events","type":"User","site_admin":false},"created_at":"2016-05-25T15:35:57Z","updated_at":"2016-05-25T15:35:57Z","body":"And another copy-paste from @DeeZone on Slack:\r\n\r\n> I suspect we'll allow the user to select / update / add addresses through their Phoenix profile. Also we could message them to confirm the detection of new addresses (such as Niche import data) to give them reason to keep their profile settings current.\r\n> \r\n> I think from a data perspective this issue is important to better understand who our members are. How we choose to use the information would be a question for smarter UX minds. But the choice seems fundamental.\r\n>\r\n> There's about 30 of the ~3000 Niche users imported in a day.\r\n\r\nThis definitely seems like something we should think about a fix for."}}
{"actor":{"display_login":"DFurnes"}}