Bodhi Redesign Updates

[rkolathu]

Hi All,

Past few weeks, me, Ryan and Mo had been working on the Bodhi UX 
Redesign project. We do have some updates regarding the project below:

*User Identification*

1. We have identified our target users for our project mainly testers, 
packagers, release engineers and other users from the open source 
community.

*Bodhi Wiki page*

2. A wiki page has been put up for the purpose of sharing updates about 
the project : here is a preliminary version so far 
https://fedoraproject.org/wiki/Bodhi/2016UXReview

*Initial User Interviews*

3. We had conducted an initial one on one with one of our users (more 
like user walk through) and the feedback has been been updated in the 
wiki page as well.

*Survey*

4. Further , we are planning on sharing the survey through this list, so 
we welcome all of you to take the survey and provide some feedback.

Lastly, any feedback and suggestions on the progress are welcome.

Thanks

Radhika

[Bruno Wolff III]

On Fri, Jul 22, 2016 at 16:46:52 -0400,
  rkolathu <rkolathu(a)redhat.com&gt; wrote:
> Lastly, any feedback and suggestions on the progress are welcome. 
Please make it possible to use the web page to submit updates and do 
push requests (from testing to stable) without having to enable 
javascript. It's OK if some extra bells and whistles don't.

[rkolathu]

Hi bruno

Thanks for the great suggestion, having a button to do push requests 
from the testing branch to the stable one seems like a great idea and 
implementable as well. However I could not understand the part about not 
having to enable to javascript. If you could explain me more about this 
it will be great. Meanwhile opening an RFE in the github page 
https://github.com/fedora-infra/bodhi/issues would be great as well


On 07/22/2016 06:26 PM, Bruno Wolff III wrote:
>  On Fri, Jul 22, 2016 at 16:46:52 -0400,
>   rkolathu <rkolathu(a)redhat.com&gt; wrote:
> >
> > Lastly, any feedback and suggestions on the progress are welcome.
>
>  Please make it possible to use the web page to submit updates and do 
>  push requests (from testing to stable) without having to enable 
>  javascript. It's OK if some extra bells and whistles don't.

[Bruno Wolff III]

On Mon, Jul 25, 2016 at 10:30:57 -0400,
  rkolathu <rkolathu(a)redhat.com&gt; wrote:
> Hi bruno
>
> Thanks for the great suggestion, having a button to do push requests 
> from the testing branch to the stable one seems like a great idea and 
> implementable as well. However I could not understand the part about 
> not having to enable to javascript. If you could explain me more about 
> this it will be great. Meanwhile opening an RFE in the github page 
> https://github.com/fedora-infra/bodhi/issues would be great as well 
Turning on javascript significantly increases the risk on being compromised 
through a browser. While I implicitly trust Fedora since I am running 
Fedora code on my laptops, server and work desktop, having to turn it on 
still poses some increase in that bodhi specifically is compromised or that 
I forget to turn it off when looking at some place else.

[rkolathu]

Hi Bruno,

Agreed , this is mostly a security concern, something which I have the 
least expertise. All I can say its perhaps possible to implement using 
post and an identifier but beyond that Luke Macken or anyone who is a 
security expert will be able to help you better with this.

On 07/25/2016 11:46 AM, Bruno Wolff III wrote:
>  On Mon, Jul 25, 2016 at 10:30:57 -0400,
>   rkolathu <rkolathu(a)redhat.com&gt; wrote:
> > Hi bruno
> >
> > Thanks for the great suggestion, having a button to do push requests 
> > from the testing branch to the stable one seems like a great idea and 
> > implementable as well. However I could not understand the part about 
> > not having to enable to javascript. If you could explain me more 
> > about this it will be great. Meanwhile opening an RFE in the github 
> > page https://github.com/fedora-infra/bodhi/issues would be great as well
>
>  Turning on javascript significantly increases the risk on being 
>  compromised through a browser. While I implicitly trust Fedora since I 
>  am running Fedora code on my laptops, server and work desktop, having 
>  to turn it on still poses some increase in that bodhi specifically is 
>  compromised or that I forget to turn it off when looking at some place 
>  else.

[Kevin Fenzi]

On Mon, 25 Jul 2016 10:46:28 -0500
Bruno Wolff III <bruno(a)wolff.to&gt; wrote:

>  On Mon, Jul 25, 2016 at 10:30:57 -0400,
>    rkolathu <rkolathu(a)redhat.com&gt; wrote:
>  >Hi bruno
>  >
>  >Thanks for the great suggestion, having a button to do push requests 
>  >from the testing branch to the stable one seems like a great idea
>  >and implementable as well. However I could not understand the part
>  >about not having to enable to javascript. If you could explain me
>  >more about this it will be great. Meanwhile opening an RFE in the
>  >github page https://github.com/fedora-infra/bodhi/issues would be
>  >great as well  
>  
>  Turning on javascript significantly increases the risk on being
>  compromised through a browser. While I implicitly trust Fedora since
>  I am running Fedora code on my laptops, server and work desktop,
>  having to turn it on still poses some increase in that bodhi
>  specifically is compromised or that I forget to turn it off when
>  looking at some place else. 
Well, I guess it depends on how you manage those permissions? 
Shouldn't whatever you are using remember that you said it was ok for
bodhi to use javascript?

I'm not sure it's really practical for a complex application like bodhi
to be all that functional without javascript. Especally when there is a
command line that should be able to do all that you need also. 

kevin