Re: Authentication prompt for mbox downloads

On Thu, Mar 26, 2020 at 2:42 PM Adrian Klaver <adrian(dot)klaver(at)aklaver(dot)com>
wrote:

> On 3/26/20 7:37 AM, Dave Page wrote:
> >
> >
> > On Thu, Mar 26, 2020 at 2:03 PM Jonathan S. Katz <jkatz(at)postgresql(dot)org
> > <mailto:jkatz(at)postgresql(dot)org>> wrote:
> >
> > On 3/26/20 9:51 AM, Magnus Hagander wrote:
> > >
> > >> I don't see how any of the above, including Dave's patch, make
> > things
> > >> worse. Again I was just suggesting on how to display the
> > credentials,
> > >> not adding more steps to downloading the mbox.
> > >
> > > Well, Daves patch doesn't cover 2 out of 3 cases, that's a start
> :)
> >
> >
> > I'm not clear what cases you're referring to, even after re-reading the
> > thread.
>
>
> https://www.postgresql.org/message-id/CABUevEyiUpQun8X2fQj6m3n2J_2CHisTDX0vUXFwq%2BJR9JdZHA%40mail.gmail.com
>
> "And it also misses the
> usecase of people downloading thread-as-mbox, as well as the
> functionality to view raw message, which both use the same protection,
> so should be equally informed."
>

Ahh, right - thanks :-)

>
> >
> > > And it makes it worse in that it goes in the very most "valuable
> > > space" on the screen, for something that's focused on a tiny
> portion
> > > of our users.
> > >
> > > I'm certainly not against making the information better, I'm just
> not
> > > sure that's the best way.
> >
> > We could move it to the bottom of the pages. Or add it to this
> page[1]
> > and call it a day.
> >
> >
> > Either would largely guarantee that users don't see it.
> >
> > I was going to suggest putting a help icon with popup hint on click next
> > to the table header for the column, but then I noticed we don't actually
> > have column headers.
> > --
> > Dave Page
> > Blog: http://pgsnake.blogspot.com
> > Twitter: @pgsnake
> >
> > EnterpriseDB UK: http://www.enterprisedb.com
> > The Enterprise PostgreSQL Company
>
>
> --
> Adrian Klaver
> adrian(dot)klaver(at)aklaver(dot)com
>

--
Dave Page
Blog: http://pgsnake.blogspot.com
Twitter: @pgsnake

EnterpriseDB UK: http://www.enterprisedb.com
The Enterprise PostgreSQL Company