decred / politeiagui

ISC License
62 stars 56 forks source link

[cms] ui/ux improvements: account subpages #2509

Open ta-lind opened 3 years ago

ta-lind commented 3 years ago

Suggesting a set of improvements to simplify, and tidy up the views. Figma: https://www.figma.com/file/RuzhkKo9fUjKQLqGbUPjHl/decred-piui-cms?node-id=290%3A382

Re: @MariaPleshkova

xaur commented 2 years ago

All good suggestions! I would appreciate an attached PNG mockup accessible without visiting Figma, like in the other UI/UX issues.

This is not strictly about Account subpages but is quite related to their contents so I'll post here.

One thing we may improve during this CMS redesign round is user's awareness about his "identity something". My gut feeling is that people do not fully understand everything that identity does and why it is important, in both Politeia and CMS.

Identity is essentially a pair of cryptographic keys that signs your messages. How big can this be?

In Politeia, proposals, comments, comment votes, and now also updates, are signed with identity. These messages might have high impact on decision making and spending, so these signatures might become more important.

In CMS, identity is already used to sign invoices and comments. I'm not sure about DCCs and DCC votes, but it should. In the future, I hope it will be also used to sign proposal owner's approval of billing against the proposal (and without such approval billing will not be allowed).

Once we get to Politeia-based forum all messages in it will be signed by identity as well.

Losing identity is not a big problem currently because it can be easily re-created. In other words, it is secondary to login credentials. But if we want to ditch the email (https://github.com/decred/politeia/issues/554) and work towards better authentication (WebAuthn), autonomy and decentralization ("self-sovereign identity"), this key pair will become more important than login+password pair.

To make it real we need people to get educated and start treating it seriously.

To do that, I suggest to make the identity training and backup step visible and "unavoidable". One UX I imagined is top banner that can only be dismissed once the identity is backed up (#840), but there could be better solutions.

ta-lind commented 2 years ago

Good points on the id. Could you post a summary of these to /dcrdesign repo. There's some onboarding content in the works, for which we got a quite nice and lightweight graphical approach. The same approach can apply to Pi and CMS – Id stuff and being on time with the invoices could be good low hanging fruits to kick off with.

xaur commented 2 years ago

@linnutee I posted a slightly reworked version in https://github.com/decred/dcrdesign/issues/261.