-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Ryan, I'm having a look at the lucid chart now. In particular, I'm looking at the bottom-right quadrant of the diagram.
The user can be sent to the "account locked" screen as the result of three actions: 1) sign in 2) delete account (from settings) 3) change password (from settings) In the screen diagram, you have a verification screen with the text 'Account Reverified, Continue to "service"'. The "Continue to service" portion is only going to be shown for case 1. That text doesn't make sense in cases 2 and 3. We could print something like "Your account has been deleted" or "Your password has been changed" if the user verifies in the same browser and the original tab is still open. I imagine the original tab, if still open and verification occurs in the same browser, should complete whatever it was trying to do. If the user verifies in a second browser, I'm not sure what's best. If the original tab is still open and we complete the action (signIn, changePassword, deleteAccount), are we opening the user up to being phished? Is a user who verifies in a second browser an edge case and they need to restart the action they initiated in the first browser? Thanks Ryan, Shane On 15/12/2014 17:42, Chris Karlof wrote: > + dev-fxacct, rfk, and stomlinson > > Francois is no longer on FxA. rfk and stomlinson are leading the implementation of the locked account work. > > -chris > > > > On Dec 15, 2014, at 7:07 AM, Ryan Feeley <[email protected]> wrote: > >> Hi Chris and Francois, >> >> Here’s a first attempt at describing the user experience of the locked account state machine: >> https://www.lucidchart.com/documents/view/a8190a33-b8f3-448c-bc9c-474528e46d37 >> >> Am I close? >> >> Let me know if I should resend this email to a list, and which one. >> >> Ryan Feeley >> UX, Cloud Services >> Mozilla UX >> IRC: rfeeley >> > -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBAgAGBQJUkE/2AAoJEEWxVe6aGsKINaAIAJdAOgOc5Hlu6MUUarZ7FSwt Cl9Uhuk/neTIrMKoUjJ27Rws0mMEMYDCBRn3fjsqu5r91y1pSqO35mXN6oz3SA5a gnWYjAnCRghJAMDHoSS4Eo8YV2m8P1B5O64ERm20eB9XW7/ETgwm/rJS+xxDhMmY asyDylIHa0hhdg6F241cxkndI6nJlu1YBEiSujaAUgXWQBedId7F8dg3nDfIyt+C IvfXkpQb7rqbIPKx24leN3AXCbCm36bPbSHTTg43VAVy58PUWkzpqXQ6HEiTuGcD qlSzJ9fC7I1Pc7iZSQq9KF5GOVhT0FJwRrGZ6jheMcFAMXkKiM0c77HrcSq7/JA= =SJWZ -----END PGP SIGNATURE-----
_______________________________________________ Dev-fxacct mailing list [email protected] https://mail.mozilla.org/listinfo/dev-fxacct

