578136 - Show warning notification when FIPS mode is active

Status: NEW

(Firefox :: Sync, defect, P5)

Description

[Ed Lee :Mardak]

Sync doesn't work with NSS in FIPS mode and breaks as in bug 443386. We should let the user know what's happening.

Comment 1

[Brian Smith (:briansmith, :bsmith, use NEEDINFO?)]

There needs to be a way for the system administrator to disable Sync in FIPS mode. Otherwise, the users who need FIPS cannot use Firefox. Any warning should be explaining why Sync is disabled, and can't be something the user can click through without disabling FIPS mode first (which they probably can't do in a real FIPS setting as it will be locked by the sysadmin).

Comment 2

[Mike Connor [:mconnor]]

So, kinda feels like we could just morph this bug to do the following:

1) Add a "serviceDisabled" int (naming subject to change) on the Status object.  We could return multiple values (1: admin disabled, 2: FIPS disabled (user), 3: FIPS-disabled (locked) 4: crypto failed, etc) from this call.

2) Ensure that the "set up sync" menuitem + prefpane button only gets enabled/shown for Status.serviceDisabled = 0.

2a) We should add a string to the prefpane to explain why this isn't accessible.

3) If Sync is set up already, on service init we can show a bottom notification with an appropriate string:

1: Your system administrator has disabled Firefox Sync on this computer. [Don't Show Again]
2: Your system administrator has enabled FIPS mode, which prevents Sync from working. [Don't Show Again]
3: FIPS mode is active, preventing Sync from working click here to view encryption settings: [Options]
4: Crypto done failed, omg! [Try Again]