Add cookie check on edit

[sourabhtk37]

Checks on whether the same user is trying to edit the snippet.

[sourabhtk37]

Using django session management.

[nishutosh]

?elaborate the issue please

[sourabhtk37]

What?
Normally in request-response cycle, each request from the same user is treated as brand new request.
Now we have to have some mechanism to maintain state between the user and the server (i.e a session).This can be done in many ways but via cookie would be the easiest way to do it.

Why session?
Let's say you created some code_snippet, what if you wanted to see the old snippets that you created an hour ago?
Maintaining a session will be quite useful for short term use.

Alternative
Another mechanism is to use offline DB for larger period of persistence. Something like couchDB or pouchDB will be great.

[sourabhtk37]

Another thing is:
We are allowing anyone to edit the snippet. We should do something about it but at the same time allow collaboration.
One solution that I think is to allow edit only when the creator of the snippet is online.

[nishutosh]

why we are not using complete auth then... user will give permissions to others to collab...all its snippet will be saved under him ?

[sourabhtk37]

I don't think user permission is necessary, it's apparent that user shared the url and is allowing people to edit (unless otherwise specified, we can make a checkbox for that). Also other users have to be logged in to edit too in this case.

Complete auth seems totally unnecessary because a mere session can achieve the same thing. DB space is saved, faster db queries etc

But I would like to hear reasons why complete auth is useful.

[nishutosh]

Let's say you created some code_snippet, what if you wanted to see the old snippets that you created an hour ago?

Do you want to view all the old snippets for last one hour only ?
Time limit after which the session will be destroyed ?

[sourabhtk37]

Whatever you saw fit. :)
Note that mobile users will also be using it.

[nishutosh]

okay i have initiated the session mechanism but what should the page display in old snippets
i mean file name or unique id or the url of the file?

[sourabhtk37]

Since we are not giving access via file_name, then if file_name is present or given, then show that else unique ID.