On Thu, Jun 2, 2011 at 8:56 AM, Gary Poster <gary.pos...@canonical.com> wrote:
>
> On Jun 2, 2011, at 9:39 AM, Deryck Hodge wrote:
>
>> On Thu, Jun 2, 2011 at 8:32 AM, Gary Poster <gary.pos...@canonical.com> 
>> wrote:
>>> A warning from experience: beware that our current feature flag story works 
>>> pretty well for beta testing authenticated users, but not so well for 
>>> anonymous users.  We should be vigilant to make sure that things work for 
>>> anonymous users before turning flags on for everyone--presumably by turning 
>>> flags on for everyone on local instances and then on qastaging/staging (as 
>>> appropriate) and doing some exploratory testing.
>>>
>>
>> Hi, Gary.
>>
>> Can you be specific about what didn't work for you?  Is it that the
>> feature flag system assumes an authenticated user, and so once opened
>> for everyone, anonymous users saw nothing as if the content was still
>> hidden behind the flag?  Or was the behavior more unpredictable for
>> anonymous users and flags?  Just curious about the sort of problem to
>> look for myself.
>
> New code hidden behind a feature flag fell over for anonymous users.  In this 
> particular case, it was security related.
>
> Because our current feature flags are geared towards turning trial features 
> on based on characteristics of an authenticated user, this is the kind of 
> thing it is easy to miss.
>
> I'm not sure if we allow all canonical LP devs to change feature flags on 
> staging and qastaging yet.  This would be a use case for it, because we would 
> want to have exploratory testing both with the "everyone (including anonymous 
> users) gets the feature flag" and with the "only certain people get the 
> feature flag" scenarios.
>
> Alternatively or in addition, perhaps there's a clever feature flag tweak we 
> can do, like looking for a browser cookie that we insert manually in our 
> browsers, or something.
>
> Gary

Gotchas.  Thanks for the follow up.

Cheers,
deryck


-- 
Deryck Hodge
https://launchpad.net/~deryck
http://www.devurandom.org/

_______________________________________________
Mailing list: https://launchpad.net/~launchpad-dev
Post to     : launchpad-dev@lists.launchpad.net
Unsubscribe : https://launchpad.net/~launchpad-dev
More help   : https://help.launchpad.net/ListHelp

Reply via email to