On 28/06/2011 00:44, Sam Hartman wrote:
>>>>>> "Maria" == Maria Turk<[log in to unmask]>  writes:
>      Maria>  Hi, OK yes, so with regard to removing the service ID card
>      Maria>  association when there is an error I can see a few usability
>      Maria>  issues cropping up here.  first off what sort of errors if
>      Maria>  it's all errors then we risk removing the association when
>      Maria>  error is temporary which is annoying to the user.  If we are
>      Maria>  sure that its an error that is permanent then we still have a
>      Maria>  problem because the user has specifically requested to add
>      Maria>  this association.  My immediate thoughts are if removing the
>      Maria>  association is important because we don't want the user to
>      Maria>  have to go through looking up the service and removing it
>
> In the April meeting we discussed and I believed agreed that having
> users go and look up a service and remove associations was always the
> wrong answer.  I thought we were looking at a mechanism where the user
> could enter a mode where they were always prompted but the current
> association was the default.
> The open question in April was how to signal this to the user.
> What was the resolution of that?
Yes that's true and it's still not a good answer because there might be 
an error.  So what I'm suggesting is this.   The user tries to connect 
to a service via the application and GSS-API for the first time.  The 
user is presented with a list of ID Cards.  The user selects one of 
those ID Cards.  The ID Card is then verified and authenticates against 
the service.  After everything does well and is successful the user is 
presented with a dialog suggesting everything has gone well and if they 
would like to always user this ID Card with this service.  This is the 
case when things go well.  When things don't go well the user never sees 
the association dialog and so no association occurs.

>      Maria>
>      Maria>  then we should only ask for the association (via the dialog)
>      Maria>  after we connect to the service with no errors.  This way
>      Maria>  there can not be an association unless all is well.
>
> How do we know what identity to use to connect to the service if we have
> not yet asked for the identity?
We will ask for the indentity
> Also, what about simply marking the association for reconfirmation
> rather than actually removing it. Effectively present the dialogue next
> time with the current association selected but with the option to
> change.
If the dialog only appears when there is a success we will not need to 
remove anything.  The association will only be set when everything goes 
well.