Skip to content

[SecurityBundle] Change information label from red to yellow #41242

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jun 27, 2021

Conversation

94noni
Copy link
Contributor

@94noni 94noni commented May 15, 2021

Q A
Branch? 5.x
Bug fix? no
New feature? no
Deprecations? no
Tickets .
License MIT
Doc PR .

The red colour feels like an error, but being not authenticated is more like a warning (generally associated with yellow/orange) than an error (generally in red).
Feel free to close, cheers :)

@wouterj
Copy link
Member

wouterj commented May 16, 2021

Are you by any chance using the new authenticator system (enable_authenticator_manager: true)? I think that messed up this color (you can see "not authenticated" being defined as yellow for the old system on line 8).
If so, we probably should do this only for the new system. In that case, let's wait on #41139 to be merged as it introduces a way to detect which system is used in the data collector.

@wouterj wouterj modified the milestones: 5.x, 5.2 May 16, 2021
@94noni
Copy link
Contributor Author

94noni commented May 16, 2021

@wouterj let me check and I’ll report back soon
Lets wait for now :)

edit: yes indeed my project uses the new security system

@pavol-tuka
Copy link
Contributor

pavol-tuka commented Jun 18, 2021

I think there should be no extra color if no firewall is matched, element should be black. Consider public website with no auth at all. Should by developer "warned" or "errored" if no firewall match is expected?

@wouterj
Copy link
Member

wouterj commented Jun 18, 2021

@pavol-tk if a firewall doesn't match, the security block isn't visible in the toolbar. The yellow color is shown when a firewall matches, but a user is not authenticated (this is currently red).

@pavol-tuka
Copy link
Contributor

pavol-tuka commented Jun 18, 2021

@wouterj No firewall matched, and block is visible ...and red ... or am I missing something?

screen.mp4

@wouterj wouterj changed the base branch from 5.4 to 5.2 June 27, 2021 11:37
@wouterj
Copy link
Member

wouterj commented Jun 27, 2021

Thank you @94noni!

@pavol-tk hmm, you're correct indeed. I agree with you and I've proposed a fix for this in #41874

@94noni 94noni deleted the patch-1 branch June 27, 2021 12:24
This was referenced Jun 30, 2021
fabpot added a commit that referenced this pull request Jul 2, 2021
…matched (wouterj)

This PR was merged into the 5.4 branch.

Discussion
----------

[SecurityBundle] Hide security toolbar if no firewall matched

| Q             | A
| ------------- | ---
| Branch?       | 4.4
| Bug fix?      | yes
| New feature?  | no
| Deprecations? | no
| Tickets       | Fix #41242 (comment)
| License       | MIT
| Doc PR        | -

As reported by `@pavol`-tk, we currently show a red Security block in the toolbar if no firewall matched. I think we should instead leave the block out of the toolbar, just like we do with all other elements if there is no data for that request.

cc `@javiereguiluz` as you're the best in these UX like decisions :)

Commits
-------

75590aa [SecurityBundle] Hide Security item if no firewall matched
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants