Changeset 13099 for main/waeup.kofa/trunk/docs/source/userdocs/applicants/browser.rst

Timestamp:

24 Jun 2015, 10:46:58 (9 years ago)

Author:

Henrik Bettermann

Message:

More docs.

File:

• main/waeup.kofa/trunk/docs/source/userdocs/applicants/browser.rst (modified) (1 diff)

main/waeup.kofa/trunk/docs/source/userdocs/applicants/browser.rst

@@ -1 @@
-.. _applicants_browser:
+.. _applicant_registration:
 
-Browsing the Applicants Section :sup:`in progress`
-==================================================
+Registration
+============
+
+The `ApplicantRegistrationPage` allows two register in create or in
+update mode, depending on the
+:ref:`mode of its context<application_mode>`, i.e. the applicants
+container.
+
+In create mode, `firstname`, `middlename`, `lastname`, `email` and
+`phone` are requested. A new record is being created.
+
+In update mode, only `reg_number`, `lastname` and `email` have to be
+entered. Kofa searches for an applicant record with matching
+registration number and lowercased lastname. If the search does not
+yield a result, the flash message: 'No application record found' is
+returned. The anonymous user will not know, if the registration
+number does not exist, or the provided lastname does not match. A
+third ``if`` statement checks whether the password has already been
+set and used, i.e. the the application has already been started. If
+so, the anonymous user is being requested to proceed to the login
+page.
+
+In both registration modes a randomly generated password is set and
+the email address is saved. An email with login credentials is sent
+to this address. Finally, the browser is redirected to a landing
+page. Depending on the portals configuration, the landing page tells
+the user that an email has been send to her/his mailbox, or even
+discloses additionally the login credentials. The disclosure of
+credentials has two substantial drawbacks: (1) The login credentials
+can be misused by web crawlers for bulk account creation, which may
+cause the system to crash. (2) The email address provided by the
+user is not being verified and there is no guarantee that the
+address belongs to the user or that a mailbox with such an address
+exists. Therefore, we strongly recommend to only send credentials to
+email addresses.
+
+
+.. _applicant_payment_tickets:
+
+Payment
+=======
+
+
+
+.. _creating_students:
+
+Creating Student Records
+========================
+