fix security issue

[selectricity-live] / TODO

diff --git a/TODO b/TODO
index bba3e79df8450e97ba1ba02de5de248d60a9a138..2557a5519eeba721ff0ad3fd06c5a3691bbed21f 100644 (file)
--- a/TODO
+++ b/TODO
@@ -5,8 +5,6 @@ General Issues
 
 Known bugs or issues:
 
 
 Known bugs or issues:
 

-- randomize each voting list
-

 - it'd be nice if the ordering were persistent, so I could drag
   the candidates around, then come back later (loading the page anew),
   make tweaks, and submit.
 - it'd be nice if the ordering were persistent, so I could drag
   the candidates around, then come back later (loading the page anew),
   make tweaks, and submit.


@@ -15,10 +13,6 @@ Known bugs or issues:
   if it were aware that it's a five-seat election and could say
   explicitly who the whole board is.
 
   if it were aware that it's a five-seat election and could say
   explicitly who the whole board is.
 

-- it's probably a good thing that users can't check out what alternate
-  voting systems would have done at the click of a button. =)
-  (though of course they could work it out themselves.)
-

 - is there rhyme or reason to the ordering within each row of the
   second table in pref_tables?  it could be, eg, sorted by magnitude
   of victory, narrowest first.
 - is there rhyme or reason to the ordering within each row of the
   second table in pref_tables?  it could be, eg, sorted by magnitude
   of victory, narrowest first.


@@ -30,14 +24,23 @@ Known bugs or issues:
   helpful for auditing, too, as one could separately match names to the
   correct list and match addresses to names.)
 
   helpful for auditing, too, as one could separately match names to the
   correct list and match addresses to names.)
 

-- just a tiny suggestion - possibly it could be a good idea to add a
-  counter/line-count to the table with keys and vote results so in one
-  glance someone can see that the number of votes matches the number of
-  voters.
+Elections
+===================
+
+- a way to cancel the election creation process after one has been created, but not yet started
+
+- resume election creation process after starting one at an earlier time

 
 QuickVotes
 ==============
 
 - support for emailing users when quickvotes conclude (see create.rhtml)
 
 
 QuickVotes
 ==============
 
 - support for emailing users when quickvotes conclude (see create.rhtml)
 

-- support for invisible until over quickvotes (see create.rhtml)
+- support for invisible results until over quickvotes (see create.rhtml)
+
+- quickvotes should have automatically created urls
+
+User Accounts
+===============
+- support for changing associated e-mails
+- summary of elections run needs to fit inside box