Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Link material - make URL visible to the user #2599

Closed
SebastianLopienski opened this issue Sep 12, 2016 · 3 comments · Fixed by #4718
Closed

Link material - make URL visible to the user #2599

SebastianLopienski opened this issue Sep 12, 2016 · 3 comments · Fixed by #4718
Assignees
Milestone

Comments

@SebastianLopienski
Copy link

As a user, how can I know what is the URL behind a link material? When I hover my mouse over the link, the popup just repeats the link material's name (not very useful), and the browser's status bar shows the URL of Indico's redirection, but not the final URL.

image

For usability, but also security reasons, I believe it would be better if the popup contains the final URL instead of the link's name. (BTW, wasn't that the case some time ago?)

@ThiefMaster
Copy link
Member

In case of protected link materials (I remember at least one case where someone did not want the link to be visible to anyone but people with access to the material itself) showing the link would be counter-productive.

And performing an access check for each link material when displaying the page to determine whether to show the URL would likely slow things down...

@SebastianLopienski
Copy link
Author

Of course protected links must not be displayed to unauthorized users. I would never suggest it.

I see three possibilities (but maybe there are more...):

  • display unprotected URLs; and also protected URLs, if the user is authorized - best in terms of usability, but if you say there is a performance penalty, then it's up to you to decide
  • display only unprotected URLs; hide all protected URLs, even if the user is authorized - not ideal, but perhaps a good balance between usability and performance?
  • hide all URL (as it is now) - bad for usability, and also for security (the user clicks without knowing where it will take him/her)

IMHO, the last (current) option is the worst for the users.

@ThiefMaster ThiefMaster added this to To do in Release 3.0 via automation Nov 11, 2020
@ThiefMaster ThiefMaster added this to the v3 milestone Nov 11, 2020
@plourenco plourenco self-assigned this Nov 20, 2020
@ThiefMaster ThiefMaster modified the milestones: v3, v2.3 Nov 24, 2020
@ThiefMaster ThiefMaster removed this from To do in Release 3.0 Nov 24, 2020
@ThiefMaster
Copy link
Member

done in #4718 - not sure why this issue wasn't auto-closed..

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants