There's been some discussion of a messaging framework in
`http://bugs.foocorp.net/issues/366#note-5 <http://bugs.foocorp.net/issues/366#note-5>`_
and
`http://bugs.foocorp.net/issues/314#note-1 <http://bugs.foocorp.net/issues/314#note-1>`_

It would be good if we had such a system. Simply queueing messages
in the session and then iterating through them in the interface is
probably good enough.

We could have 3 simple types of message:
- warning message (red)
- notification neutral message (yellow)
- happy success message (green)

We could iterate through the messages at the top of the document
before we show the rest of the page. We could maybe also provide a
way with javascript to be able to "close" the messages though
that's lower priority for this ticket.

See also:
`http://schendje.fedorapeople.org/temp/temp3.png <http://schendje.fedorapeople.org/temp/temp3.png>`_
`http://bugs.foocorp.net/attachments/48/temp.png <http://bugs.foocorp.net/attachments/48/temp.png>`_

Currently we use py-bcrypt for python password hashing.

`http://code.google.com/p/py-bcrypt/ <http://code.google.com/p/py-bcrypt/>`_

Should we use passlib?

`http://packages.python.org/passlib/ <http://packages.python.org/passlib/>`_

My main thought is, "Which of these libraries has more users and is
more likely to stay around while remaining secure?"

the thumbnail\_file field in the MediaEntry db schema is not used
currently.

::

    Mediagoblin/mediagoblin% grep thumbnail_file **/*.py
    db/models.py:        'thumbnail_file': [unicode]}

I think, ``media_files['thumb']`` is used for the thumbnail.