Flyspray

Reopened and set to only 20%, because:

• currently only used for create user, not edit user.
• currently the primary email of {users} is just copied to user_emails, so it is currently 2 times stored.
• id-field of the table {user_emails} is the user_id referencing table {users}, so it should be named like this. It is not a real table id, a user account can have multiple emails, oauths, xmpp/jabbers..
• Having this feature enabled, it adds more complexity that must be considered:

1. Notifications: Should Flyspray send notifications to every email (when NOTIFY_EMAIL or NOTIFY_BOTH is set currently) of that user account or only to the main email account? Possible configuration options - like one email that receives all notifications, and another email that receives only the most important or a daily summary)
2. Are the email addresses unique or can several user accounts have the same email?
3. The same problems for xmpp/jabber, OAuth2, …

• The UI for managing multiple emails, multiple xmpp/jabber, multiple OAuth2 must be planned(!) and written.
• Should we store one address (email, xmpp/jabber, OAuth2) or together in a user_email entry:

or

Or should we do a complete table change with type(email, jabber, oauth, ..) field:
table user_address:

1. Permissions and edit/delete handling.

Unique index: [address_type,address,address_provider] (working also with NULL or empty string?)
or merge address and address_provider..

edit by peterdd 2021-03-11: some typo fixes

The more I think about it we should consider something like the third option, an new table

'user_address' (or 'users_addresses')

For FS1.2 maybe.

This removes current limitations and makes adding additional address types and notification channels easy. And the current table user_emails isn't really used. (only when people registering, but no usage later)

TODO: Each additional given Email address must be also validated in the same way like the primary email address to avoid abuse of email addresses.

E.g. send a link with token to this email that the receiver must click to validate the additional email with a user account in flyspray.