There's been some discussion of a messaging framework in http://bugs.foocorp.net/issues/366#note-5 and http://bugs.foocorp.net/issues/314#note-1

It would be good if we had such a system. Simply queueing messages in the session and then iterating through them in the interface is probably good enough.

We could have 3 simple types of message: - warning message (red) - notification neutral message (yellow) - happy success message (green)

We could iterate through the messages at the top of the document before we show the rest of the page. We could maybe also provide a way with javascript to be able to "close" the messages though that's lower priority for this ticket.

See also: http://schendje.fedorapeople.org/temp/temp3.png http://bugs.foocorp.net/attachments/48/temp.png

Currently we use py-bcrypt for python password hashing.

http://code.google.com/p/py-bcrypt/

Should we use passlib?

http://packages.python.org/passlib/

My main thought is, "Which of these libraries has more users and is more likely to stay around while remaining secure?"

the thumbnail_file field in the MediaEntry db schema is not used currently.

Mediagoblin/mediagoblin% grep thumbnail_file **/*.py
db/models.py:        'thumbnail_file': [unicode]}

I think, media_files['thumb'] is used for the thumbnail.