Re: Bodhi Redesign Updates

[Kevin Fenzi]

On Mon, 25 Jul 2016 10:46:28 -0500
Bruno Wolff III  wrote:

> On Mon, Jul 25, 2016 at 10:30:57 -0400,
>   rkolathu  wrote:
> >Hi bruno
> >
> >Thanks for the great suggestion, having a button to do push requests 
> >from the testing branch to the stable one seems like a great idea
> >and implementable as well. However I could not understand the part
> >about not having to enable to javascript. If you could explain me
> >more about this it will be great. Meanwhile opening an RFE in the
> >github page https://github.com/fedora-infra/bodhi/issues would be
> >great as well  
> 
> Turning on javascript significantly increases the risk on being
> compromised through a browser. While I implicitly trust Fedora since
> I am running Fedora code on my laptops, server and work desktop,
> having to turn it on still poses some increase in that bodhi
> specifically is compromised or that I forget to turn it off when
> looking at some place else.

Well, I guess it depends on how you manage those permissions? 
Shouldn't whatever you are using remember that you said it was ok for
bodhi to use javascript?

I'm not sure it's really practical for a complex application like bodhi
to be all that functional without javascript. Especally when there is a
command line that should be able to do all that you need also. 

kevin


pgpoadYZLmgaV.pgp
Description: OpenPGP digital signature
___
infrastructure mailing list
infrastructure@lists.fedoraproject.org
https://lists.fedoraproject.org/admin/lists/infrastructure@lists.fedoraproject.org

Re: Bodhi Redesign Updates

[rkolathu]

Hi Bruno,

Agreed , this is mostly a security concern, something which I have the 
least expertise. All I can say its perhaps possible to implement using 
post and an identifier but beyond that Luke Macken or anyone who is a 
security expert will be able to help you better with this.


On 07/25/2016 11:46 AM, Bruno Wolff III wrote:

On Mon, Jul 25, 2016 at 10:30:57 -0400,
 rkolathu  wrote:

Hi bruno

Thanks for the great suggestion, having a button to do push requests 
from the testing branch to the stable one seems like a great idea and 
implementable as well. However I could not understand the part about 
not having to enable to javascript. If you could explain me more 
about this it will be great. Meanwhile opening an RFE in the github 
page https://github.com/fedora-infra/bodhi/issues would be great as well


Turning on javascript significantly increases the risk on being 
compromised through a browser. While I implicitly trust Fedora since I 
am running Fedora code on my laptops, server and work desktop, having 
to turn it on still poses some increase in that bodhi specifically is 
compromised or that I forget to turn it off when looking at some place 
else.

___
infrastructure mailing list
infrastructure@lists.fedoraproject.org
https://lists.fedoraproject.org/admin/lists/infrastructure@lists.fedoraproject.org

Re: Bodhi Redesign Updates

[rkolathu]

Hi bruno

Thanks for the great suggestion, having a button to do push requests 
from the testing branch to the stable one seems like a great idea and 
implementable as well. However I could not understand the part about not 
having to enable to javascript. If you could explain me more about this 
it will be great. Meanwhile opening an RFE in the github page 
https://github.com/fedora-infra/bodhi/issues would be great as well



On 07/22/2016 06:26 PM, Bruno Wolff III wrote:

On Fri, Jul 22, 2016 at 16:46:52 -0400,
 rkolathu  wrote:


Lastly, any feedback and suggestions on the progress are welcome.


Please make it possible to use the web page to submit updates and do 
push requests (from testing to stable) without having to enable 
javascript. It's OK if some extra bells and whistles don't.

___
infrastructure mailing list
infrastructure@lists.fedoraproject.org
https://lists.fedoraproject.org/admin/lists/infrastructure@lists.fedoraproject.org

Re: Bodhi Redesign Updates

[Bruno Wolff III]

On Fri, Jul 22, 2016 at 16:46:52 -0400,
 rkolathu  wrote:


Lastly, any feedback and suggestions on the progress are welcome.


Please make it possible to use the web page to submit updates and do 
push requests (from testing to stable) without having to enable 
javascript. It's OK if some extra bells and whistles don't.

___
infrastructure mailing list
infrastructure@lists.fedoraproject.org
https://lists.fedoraproject.org/admin/lists/infrastructure@lists.fedoraproject.org

Bodhi Redesign Updates

[rkolathu]

Hi All,

Past few weeks, me, Ryan and Mo had been working on the Bodhi UX 
Redesign project. We do have some updates regarding the project below:


*User Identification*

1. We have identified our target users for our project mainly testers, 
packagers, release engineers and other users from the open source 
community.


*Bodhi Wiki page*

2. A wiki page has been put up for the purpose of sharing updates about 
the project : here is a preliminary version so far 
https://fedoraproject.org/wiki/Bodhi/2016UXReview


*Initial User Interviews*

3. We had conducted an initial one on one with one of our users (more 
like user walk through) and the feedback has been been updated in the 
wiki page as well.


*Survey*

4. Further , we are planning on sharing the survey through this list, so 
we welcome all of you to take the survey and provide some feedback.


Lastly, any feedback and suggestions on the progress are welcome.

Thanks

Radhika

___
infrastructure mailing list
infrastructure@lists.fedoraproject.org
https://lists.fedoraproject.org/admin/lists/infrastructure@lists.fedoraproject.org