1136271 - Make user profile page visible to anyone for easier sharing

Status: RESOLVED FIXED

(bugzilla.mozilla.org :: Extensions, enhancement, P5)

Description

[Kenneth Cochran [:kennycoc]]

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 Safari/537.36

Steps to reproduce:

I tried to link to my Bugzilla User Profile so that in the future I can showcase the work I have done to prospective employers.


Actual results:

I was unable to access the profile page unless I was logged in.


Expected results:

There should be an option to allow anyone to view a bugzilla profile.

Comment 1

[:glob ✱]

> There should be an option to allow anyone to view a bugzilla profile.

this is possible, but only if you pass in a user-id instead of an email address:
https://bugzilla.mozilla.org/user_profile?user_id=532040

we could add a small link to the bottom of the profile page with that url, something like "Share this page".

Comment 2

[Kenneth Cochran [:kennycoc]]

Awesome, but how do I find out my user id? It's definitely not user friendly the way it is now.

Comment 3

[:glob ✱]

(In reply to Kenneth Cochran [:kennycoc] from comment #2)
> Awesome, but how do I find out my user id? It's definitely not user friendly
> the way it is now.

adding a link with the id will address that issue.

Comment 4

[Jake Nixon]

Since noone has shown activity here for a while, I'll work on a patch for this.

I've figured out how to get the id and everything to make the link, what is the best way to present that to the user? A button they can click to copy the link to the clipboard?

Comment 5

[Emma Humphries ☕️🎸🧞‍♀️✨ (she/they) [:emceeaich] (Pacific Time) use needinfo]

(In reply to Jake Nixon from comment #4)
> Since noone has shown activity here for a while, I'll work on a patch for
> this.
> 
> I've figured out how to get the id and everything to make the link, what is
> the best way to present that to the user? A button they can click to copy
> the link to the clipboard?

I'm going to ni? :kohei here since he's been our UX lead. :kohei, should be mentor or reviewer on this patch?

Jake, please clone https://github.com/mozilla-bteam/bmo and follow the instructions there for getting it running in a container.

If you use a button to copy the profile link, there's a pattern you can follow on the show_bug.cgi page used by the "Copy Summary" button. 

When you have a patch ready, put this bug number in the pull request description on GitHub, then create a text attachment in this bug with the link to the PR, and request a review.

Comment 6

[Kohei Yoshino [:kohei]]

This bug is not all about a Share This Page button but how the profile page can be accessed.

1. Make the User Profile page visible to signed-out users as well, as described by the reporter. Given that the User Activity page is visible to anyone, it’s probably okay to make this change
2. Change the My Profile link in the Account menu from `/user_profile` to `/user_profile?login={USER_EMAIL}`

Then you even don’t need a Share button. And optionally,

3. Make the URL prettier like `/user/{USER_ID}` (depends on Bug 1372631 and Bug 1455495)
4. Redesign the page, making it more appealing like GitHub’s user profile page

As said, this probably not a good-first-bug 😉

Comment 7

[:glob ✱]

(In reply to Kohei Yoshino [:kohei] from comment #6)
> This bug is not all about a Share This Page button but how the profile page
> can be accessed.
> 
> 1. Make the User Profile page visible to signed-out users as well, as
> described by the reporter. Given that the User Activity page is visible to
> anyone, it’s probably okay to make this change
> 2. Change the My Profile link in the Account menu from `/user_profile` to
> `/user_profile?login={USER_EMAIL}`

unfortunately this approach exposes email addresses to unauthenticated users; something we've taken care to avoid doing.

Comment 8

[Kohei Yoshino [:kohei]]

But spammers have to know the email address first, right? Also, the API doesn't have any restriction.

https://bugzilla.mozilla.org/rest/user?names=kohei.yoshino%40gmail.com is exposed to unauthenticated users.

But anyway I want to wait until 3 = real user name support is coming.

Comment 9

[Kohei Yoshino [:kohei]]

The public API returns the user ID so even unauthenticated users can open the user profile page with the ID:

https://bugzilla.mozilla.org/user_profile?user_id=232883

My Activity page and other searches are also available to anyone, so I think the current login requirement on this User Profile makes little sense.

https://bugzilla.mozilla.org/page.cgi?id=user_activity.html&action=run&who=kohei.yoshino%40gmail.com
https://bugzilla.mozilla.org/buglist.cgi?emailassigned_to1=1&emailtype1=exact&email1=kohei.yoshino%40gmail.com

Comment 10

[:glob ✱]

the API is a different issue, and one that's covered by our privacy policy.  (it's complicated)

but i see what you're saying now and withdraw my concerns.  sorry about that.


> But anyway I want to wait until 3 = real user name support is coming
i'm with you here, however "want to" (comment 8) is different from "optional" (comment 6) :)



another simpler option is to change the existing links to your profile page from login=$email to user_id=$id.

Comment 11

[Kohei Yoshino [:kohei]]

Attachment: pull request

Okay, let’s just change the link for now...