Re: Authentication prompt for mbox downloads

From: Adrian Klaver <adrian(dot)klaver(at)aklaver(dot)com>
To: Dave Page <dpage(at)pgadmin(dot)org>, "Jonathan S(dot) Katz" <jkatz(at)postgresql(dot)org>
Cc: Magnus Hagander <magnus(at)hagander(dot)net>, PostgreSQL WWW <pgsql-www(at)postgresql(dot)org>
Subject: Re: Authentication prompt for mbox downloads
Date: 2020-03-26 14:42:21
Message-ID: 10b244a6-fb96-95fd-18a0-b6eb2b23fcdb@aklaver.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-www

On 3/26/20 7:37 AM, Dave Page wrote:
>
>
> On Thu, Mar 26, 2020 at 2:03 PM Jonathan S. Katz <jkatz(at)postgresql(dot)org
> <mailto:jkatz(at)postgresql(dot)org>> wrote:
>
> On 3/26/20 9:51 AM, Magnus Hagander wrote:
> >
> >> I don't see how any of the above, including Dave's patch, make
> things
> >> worse. Again I was just suggesting on how to display the
> credentials,
> >> not adding more steps to downloading the mbox.
> >
> > Well, Daves patch doesn't cover 2 out of 3 cases, that's a start :)
>
>
> I'm not clear what cases you're referring to, even after re-reading the
> thread.

https://www.postgresql.org/message-id/CABUevEyiUpQun8X2fQj6m3n2J_2CHisTDX0vUXFwq%2BJR9JdZHA%40mail.gmail.com

"And it also misses the
usecase of people downloading thread-as-mbox, as well as the
functionality to view raw message, which both use the same protection,
so should be equally informed."

>
> > And it makes it worse in that it goes in the very most "valuable
> > space" on the screen, for something that's focused on a tiny portion
> > of our users.
> >
> > I'm certainly not against making the information better, I'm just not
> > sure that's the best way.
>
> We could move it to the bottom of the pages. Or add it to this page[1]
> and call it a day.
>
>
> Either would largely guarantee that users don't see it.
>
> I was going to suggest putting a help icon with popup hint on click next
> to the table header for the column, but then I noticed we don't actually
> have column headers.
> --
> Dave Page
> Blog: http://pgsnake.blogspot.com
> Twitter: @pgsnake
>
> EnterpriseDB UK: http://www.enterprisedb.com
> The Enterprise PostgreSQL Company

--
Adrian Klaver
adrian(dot)klaver(at)aklaver(dot)com

In response to

Responses

Browse pgsql-www by date

  From Date Subject
Next Message Magnus Hagander 2020-03-26 14:44:44 Re: Authentication prompt for mbox downloads
Previous Message Dave Page 2020-03-26 14:40:18 Re: Authentication prompt for mbox downloads