1611131 - improve language around protected data

Status: RESOLVED FIXED

(Socorro :: Webapp, defect, P3)

Description

[Dinar]

User Agent: Mozilla/5.0 (X11; Linux i686; rv:68.0) Gecko/20100101 Firefox/68.0

Steps to reproduce:

i have browsed to a crash page from about:crashes. in raw dump tab i see:

Download the Raw Dump
You need to be signed in to download raw dumps.
View the Unredacted Crash
You need to be signed in to view unredacted crashes.

when i try to sign in i see

crash-stats.mozilla.com requires you to setup additional security measures for your account, such as enabling multi-factor authentication (MFA) or using a safer authentication method (such as a Firefox Account login). You will not be able to login until this is done.

installing 2 factor authentification is quite a long job, so i checked in freenode #firefox channel, whether i can access that data. and they answered that i cannot access it anyway!

Actual results:

a site requires a useless installations from me

Expected results:

i should be informed that i cannot access raw dumps and unredacted crashes, if i do not meet some criteria.

Comment 1

[Dinar]

now, i have installed 2fa and tried again, and i signed in this time, but indeed, i cannot access the data, i see
You need to be signed in to download raw dumps.
You need to be signed in to view unredacted crashes.

and there is an other bug: it should not say "You need to be signed in" in this case, but "You need to be authorized".

Comment 2

[Will Kahn-Greene [:willkg] ET needinfo? me]

Crash Stats contains category 4 data and it's very sensitive and requires authorization to access it as outlined here:

https://crash-stats.mozilla.org/documentation/memory_dump_access/

We should change the "You need to be signed in to download raw dumps." line on the Raw Dumps tab of the crash report and make it clearer.

Sorry about that!

Comment 3

[Will Kahn-Greene [:willkg] ET needinfo? me]

Attachment: pr 5429: bug 1611131: improve language around protected data and access

Comment 4

[Will Kahn-Greene [:willkg] ET needinfo? me]

willkg merged PR #5429: "bug 1611131: improve language around protected data and access" in d5b56ae.

Comment 5

[Will Kahn-Greene [:willkg] ET needinfo? me]

Attachment: pr 5430: bug 1611131: fix protected-info css

Comment 6

[Will Kahn-Greene [:willkg] ET needinfo? me]

willkg merged PR #5430: "bug 1611131: fix protected-info css" in 9c03d13.

Comment 7

[Will Kahn-Greene [:willkg] ET needinfo? me]

I made a series of language improvements across the site and additionally added notes about what a user can see and how to see protected data (if they can't see it). I think that covers the underlying issues here.

This deployed to prod in bug #1642634 just now. Marking as FIXED.