Differentiate movies a user creates from those other users create
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Helioviewer.org |
New
|
Medium
|
Unassigned |
Bug Description
In order to reduce the ease with which users can upload videos that other users created, a mechanism should be added so that movies can be marked as "read-only" if someone else created them.
One possible mechanism:
For each movie a user creates, generate some random key which gets stored in the users history and in the database. Only the user who has the corresponding key for a video has the option to upload the video; other users will not see the youtube upload button.
It may also be helpful to indicate which movies in a user's history are read-only, and which they have the rights to.
Alternatively, the movie history logic could be modified so that movies are not automatically added, and only appear for videos the users create themselves.
(few more thoughts...)
1. Will need a new column in the movies db table to store the key
2. User should probably have the option to view/save this key in case their browser cache gets wiped
3. Should we also limit MP4/WebM downloads to the user's who created the movie? This should help to further discourage users from uploading movies created by other users (although this wouldn't prevent that since it's pretty simple to download movies in an HTML5 video element).