search

mozilla-iam / dino-park-front-end

Front-end for Mozillians.org
Mozilla Public License 2.0
37 stars 32 forks source link

Profile are not public anymore, require to login (js error in console) #654

Closed Mte90 closed 2 years ago

Mte90 commented 3 years ago

Describe the bug Mozillian had the feature that a profile is public and as logged you can see more information.

To Reproduce Steps to reproduce the behavior:

  1. Go to 'https://people.mozilla.org/p/Mte90'
  2. As non logged

Expected behavior See the profile.

Screenshots Screenshot_20210526_121752

m3Lith commented 3 years ago

Why was this labeled with wontfix?

mhoye commented 3 years ago

Hi, everyone - my apologies for the inconvenience of non-public profiles, but we're in the slow process of working through filtering out a lot of spam that's found its way in to this this thing, a process that is unfortunately mostly manual. Once that's sorted out we will (I hope) reopen public profiles, with enrolment options tightened down appropriately.

I don't have good estimate of when this work will be wrapped up, for which I apologize, and I hope this is only a modest inconvenience. (Unless you were using this service to sell timeshares, narcotics, bitcoin, online gambling, essay-writing services and arranged marriages, in which case I hope it's a huge inconvenience for you and somebody pours sand in your underpants every day.)

Mte90 commented 3 years ago

In Mozillians there was similar issue and they fixed with akismet integrations and also with a report button. I know because I reported over 600+ accounts on that platform. I guess that the spam issue should be handed by the Auth service used for login?

The issue to me is that there is a JS error in console without an alert like you need to login to see the profile.

Mte90 commented 3 years ago

I think that we can close this as now if your are not logged you are forced to login to see a profile.

I don't like this approach as this was helpful to show the profiles also to people that are not using Firefox Accounts or Firefox users.

gene1wood commented 3 years ago

I don't like this approach as this was helpful to show the profiles also to people that are not using Firefox Accounts or Firefox users.

Do keep in mind, you need not be a Firefox Accounts or Firefox user to login to people.mozilla.org (you can login with any identity provider including just an email address)

m3Lith commented 3 years ago

That's not any better. The idea of a public profile, from how I understand it, should be to share it with other people with no friction at all (like a public profile on social media, with limited details), just by clicking a link. Forcing to sign in, by whatever means, should only be required if any interaction would take place.

Before this I had my profile linked when mentioning my hobbies/activities to people. I don't think many would try to login. I certainly would not.

wsmwk commented 2 years ago

I was hoping to use this. What are people using as an alternative for public info/personas?

wsmwk commented 2 years ago

related to issue #179?

wsmwk commented 2 years ago

@mhoye seems like this capability would be important for an open source organizatino. Is there an alternative? ^

floatingatoll commented 2 years ago

Hi, I'm the IAM/SSO lead. Given the participation of bad actors in the circumstances leading to this issue and other non-public information, I'm not able to address your question openly here. mhoye and I are NDA'd staff; other staff are invited to bring any concerns to us by email if this is impacting their work somehow.

As the closure of this service to anonymous visitors is currently by design, I'm going to close this ticket for the time being. Discussion will continue about what we can do about this problem regardless.

This ticket closure is neither indication of a change in position, nor an indication of any new finality. Any implication otherwise by GitHub UI is to be ignored.