SURFscz / SBS

Samenwerking Beheer Systeem ↣ Collaboration Management System
Apache License 2.0
3 stars 2 forks source link

As a user, I want to be able to reject updated AUPs, and clearly see the consequences for CO membership if I do so #664

Open FlorisFokkinga opened 1 year ago

FlorisFokkinga commented 1 year ago

The redesign for the changed AUP screen.

First screen

Image

The checkbox label should say: I agree to this acceptable use policy. Ik ga akkoord met deze acceptable use policy.

Image

Modal, in case not all AUPs are accepted

Image

FlorisFokkinga commented 1 year ago

.

oharsta commented 1 year ago

@FlorisFokkinga @baszoetekouw If a User reject an AUP, then he / she will be asked to agree every time he / she accesses SBS and also if he tries to connect directly to the service because of the login in the proxy_authz endpoint logic called by eduTeams. This is the desired behaviour?

baszoetekouw commented 1 year ago

I think that if a user rejects the AUP, they need to be removed from the CO. So they would only get the AUP question again if they rejoin the CO, I think?

oharsta commented 1 year ago

Ok. I assume we also need to change the attached screen that is shown when a user logs in and there are updated AUP's? It is not logical to display this as a dialog with the CO as a background, as the user could have used a bookmark and is heading to a different page.

image
oharsta commented 1 year ago

And do we need to change the welcome dialog shown if a user joins a CO?

Image

FlorisFokkinga commented 1 year ago

@oharsta You are right about the other screens. The plan was to first solve the complicated case of multiple reset AUPs over multiple COs. I expected that solution to also work for the simpler cases. If you think it's better to fix those as well at the same time, and there's a logical solution for those cases, please feel free to do so. 🙂

baszoetekouw commented 7 months ago

@oharsta do you have enough information to implement this, or do we need to expand on the UI?

oharsta commented 7 months ago

Enough information. Just didn't get round to.

logan-life commented 1 month ago

In principle, this is a good thing to do and aligns with values around user autonomy and privacy. In practice, this is probably not something users actually care about. They will click the green button and get to work.

Further -- in future, we will put effort into reducing the number of AUPs we throw at users, so adjusting our principles for AUPs. So for now, let's not put effort into this.