Hi Heikki, see below :)
On Apr 6, 2007, at 11:21 AM, Heikki Toivonen wrote:
Mimi Yin wrote:
Why don't we just call it Password Protection...
As a menu item, yes, this is great.
What should the set/change dialog, and other dialog captions be?
I think we can call the dialog: Password Protection
When Setting the Master Password:
===
Title: Password Protection
-----
Protect your account passwords with a Master Password.
Master password: [ ]
Confirm password: [ ]
Quality meter: xxxxxxxxxxxxx
Do not forget your master password or your account passwords will be
lost.
[Protect Passwords][Cancel]
===
(Let's be explicit that just the account passwords will be lost :o)
When Changing the Master Password
===
Title: Password Protection
-----
Change your Master Password:
Old master password: [ ]
New master password: [ ]
Confirm password: [ ]
Quality meter: xxxxxxxxxxxxx
Do not forget your master password or your account passwords will be
lost.
[Remove Password Protection] [Change Master Password][Cancel]
===
If user selects [Turn off Password Protection], we warn them:
===
Title: Remove Password Protection
------
Removing Password Protection will erase all of your account passwords.
[Remove
Password Protection] [Cancel]
===
As for turing off password protection, I think you should be able
to do
that if you remember the master password, without losing all your
account passwords. There should perhaps be 3 cases:
+ Reset master password (must know old master password, preserves
account passwords)
+ Turn off password protection (must know old master password,
preserves
account passwords)
In practice the above mean: change master password back to "". I don't
see any difference between the two choices, btw. This would be even
possible today if I allowed the change dialog to accept empty new
master
password.
Although doable, I'd say feature creep and file a bug and target it to
Future. Note that Firefox and Thunderbird password managers don't have
this feature either.
Hmm, can you log this as a separate bug to address post-preview? Add
option to Turn off Password Protection without losing account passwords?
+ Forgot master password (erases all account passwords - start
from scratch)
In the last case, do you also unpublish shares and whatnot? Or do you
just stop syncing until the user re-enters their account info?
I currently don't do anything like that, so it is all manual. Note
that
if you forget master password all your network requests that require
account passwords will fail. You must reset/erase all passwords, then
re-enter account passwords.
Ok
--
Heikki Toivonen
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
Open Source Applications Foundation "Design" mailing list
http://lists.osafoundation.org/mailman/listinfo/design
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
Open Source Applications Foundation "Design" mailing list
http://lists.osafoundation.org/mailman/listinfo/design
