Topic: Troubleshooting and Bug Reports / overview not displaying last log in time

This is very annoying.

We had one project which contained everyone in our BaseCamp copy. We could easily use this single project to see who had accessed BC recently. Knowing when someone last used BC is more useful to us than knowing when someone last looked at a specific project.

I guess this is what you get with BC style software development, things change, shit-happens, you either take it of leave it. BC is still useful to us in many ways, enough to pay for it, but little changes like this can be frustrating.

Topic: Miscellaneous / Is this legal?

I use BaseCamp, but have just looked at the ‘teamwork’ FAQ:

Is my information safe?

Absolutely. We safeguard and protect your data in a number os ways. This is a bit technical but these are a few of the reasons you data is safe with us.

1. We use salted password hashes instead of plain-text passwords (Many other online applications don’t implement this).

This is true of BaseCamp, it uses plain-text passwords, which should be changed ASAP, I have tried to raise this issue earlier this year. The feedback from the BaseCamp team was this would be fixed towards the end of 2007, I’ll check in January ;)

Topic: System Announcements / UPDATE: Clearer admin settings

Just a reminder that this security flaw is still open. Administrators can view user passwords which I really feel should not be possible.

This indicates passwords may be stored on basecamp servers as ‘plain text’ – which I feel is a dangerous thing to do.

Topic: System Announcements / UPDATE: Clearer admin settings

We do plan on changing the way the password field words this year.

Great!

I’m surprised something like this hasn’t been flagged and fixed already.

I have to admit I’ve never come across a password field that gets returned by the server pre-filled with the actual password (viewable in source).

Glad to hear it’s on the way out.

Topic: System Announcements / UPDATE: Clearer admin settings

There is one piece of sensitive information that is available to Administrators:

• User passwords

All the Administrator has to do is edit the selected user, and then view the source code.

This should be fixed ASAP – this is really not acceptable in my opinion, people assume their password is known only to them, whether it be Internet Banking or online forums – I know that should not be the case but every BaseCamp user isn’t technical savvy about these things.

Thx, Chancer

Topic: Troubleshooting and Bug Reports / Oddity - rather than a Bug

Okay, here is what I’ve found, apologies if it’s been noted before…

• Go to a project overview page
• Click “People”
• Click “Add Person”

All the names in the drop-down are ordered by:

• “Lastname, Firstname”

After adding one person (using this method rather than the permissions screen), something strange happens: The drop-down names are now ordered:

• “Firstname Lastname”

Not really a bug… it doesn’t stop me from doing what I want but it isn’t consistent, and thought I’d mention it.

Though seeing how much fun we’re having with coloured boxes on the new overview page, this oddity probably will never change ;)

Thx, Chancer

Topic: Basecamp API / Can I create a 'person'?

Thanks Chris – I’m encouraged by what I’ve seen, it makes me think my plans could work out. All our users have separate logins for our BaseCamp account. I plan to create a series of internal ‘mini-admin’ screens that allow the our BaseCamp users to administer parts of BaseCamp – and we don’t want to provide full administrator access to these users. The ‘mini-admin’ interface will need to use an administrator account to access the API, does this plan break the terms of use? I hope not.

Topic: Basecamp API / Can I create a 'person'?

Stickman – what you’ve posted makes sense.

If all functions are exposed then it could be that BaseCamp is just a system (takes care of emails and holds the database) and users manipulate the system either through the ‘official’ interface or something else. I’m interested in creating a ‘something else’ as my needs just are not fulfilled with the ‘official’ interface; getting access to information more easily. For example given a person within my company I’d like to see all the projects they are involved in (this can only be done by the ‘Account Owner’ AFAIK). I’d also like to create an interface for users to add projects, where the user is not an Administrator, as well as assign people to those newly created projects.

Topic: Basecamp API / Can I create a 'person'?

Here’s a thought…

If the BaseCamp API could allow you to create/delete/edit anything… won’t people just create a ‘better’ UI?

Could this be why the API is limited?

Thx, Chancer

Topic: Miscellaneous / Parakey

Parakey is the current project by the founders of Firefox and Firebug. It seems to be kept under-wraps for the moment but I’m sure it will be the big thing in 2007.

Are any of the guys at 37S in touch with these guys? Both companies seem to have the same vision.

Just curious!

Topic: Feature Requests / Comments in writeboards

I have had users comment on writeboards expecting email notification to others.

Perhaps this needs to be clarified somewhere that no notification gets sent out when a user comments on writeboards?

Chancer.

Topic: How are you using Basecamp? / RSS feed into MyYahoo

I don’t think BaseCamp feeds work with such readers due to the login.

Topic: Troubleshooting and Bug Reports / Dashboard bug

This bug is being looked into; I received a mail from support.

Thx, Chancer

Topic: Troubleshooting and Bug Reports / Dashboard bug

Today I’ve noticed that the Dashboard does not display my name on some of the files I’ve uploaded. What I mean is under the project items of recent activity – where it says “uploaded by”, this usually has a name after it.

Today some items have a blank instead of the a name. When I click into the Files list of a project it has the correct name by the uploaded file.

This isn’t a critical bug, but seems quite odd and it hasn’t happened before today.

Anyone else getting this?

Thx, Chancer

Topic: Troubleshooting and Bug Reports / Writeboards not working in Firefox

It seems to have started to work today – I hadn’t cleared anything in FF… not sure what that was about, but doesn’t seem to have affected many people…

Thx, Chancer

Topic: Basecamp API / Can I create a 'person'?

Nothing facetious in your reply… I’m new to BaseCamp and the API and was too lazy to research through old posts.

Now that I have I found this which suggests this will come around soon enough.

Thx, Chancer

Topic: Troubleshooting and Bug Reports / Writeboards not working in Firefox

Hi,

I’m having issues with my writeboards within BaseCamp as of today (UK Time).

When I try to open or create a writeboard I get this error:

<= javascript_include_tag “prototype”, “managers” %> <= injected_html_header %>

Followed by the standard error message.

This works fine in IE6.

My account uses SSL and this wasn’t a problem until today – could it be something to do with the latest Firefox version?

Thx, Chancer

Topic: Basecamp API / Can I create a 'person'?

Hi,

I’ve had a look through the documentation but can’t seem to find a way to create a person or a company within BaseCamp using the API.

I understand you can create messages/comments/to-do items, but exactly what can you and can’t you create using the API?

Thx, Chancer