Mozillians/Releases/Privacy Controls
Contents
Summary
Currently, phonebook users can show profile information to Vouched Mozillians. We'd like to offer them the opportunity to take control of their profile privacy and display information as they please.
The initial release will allow vouched users to specify any fields they would like to be public. If a user specifies one or more public profiles, their profile page will be publicly viewable. Only the fields marked as public will be viewable to the public.
We are aiming to launch this functionality at the end of Q1 2013.
- Implementation is being tracked in bug 747524
Project Management
Features
- A user can edit their privacy controls from their settings page on a privacy panel to make certain fields "public"
- A user who has public fields will also have a public URL
- A user's non-public fields will only be visible to vouched users
- Public viewers will be gently routed away from sections of the site that we have not yet made public
Profile Field Controls
A vouched user will be able to set visibility to their profiles on a per field basis. At least one field must be set to "public" in order for the user's profile to be shown publicly. The following options are available on a per field basis:
- Admin - The field will only be viewable by Admins. This option is available in order for sensitive information such as Home Address and T-Shirt size are in the database, but are only accessible by those that are staff and explicitly provided access to the administration panel on Mozillians.org. This option is planned for version 2.
- Staff - The field will only be viewable to Admins and staff. This option is for planned fields such as Manager, Mozilla Space, Desk Number that will be added as part of the One Phonebook project. This option is planned for version 2.
- Vouched Mozillians - The field will only be viewable by Vouched Mozillians, Staff and Admins.
- Public - The field should be viewable by the public and all other levels in the app (i.e. Vouched Mozillians and Admins).
Out of scope
- Not-logged-in homepage changes that would encourage "public" users to search/browse
- Public groups URLs
- Additional profile fields
- Additional rules on fields ("Latin only")
- Comprehensive UI changes (header, footer, look/feel)
- Allowing users to set any field to be visible only to "staff" or "admin" (for the initial release)
Privacy Administration
The default privacy level for each field will be coded in the database models. Administrators will not be able to create profile fields or change the default privacy level for a field.
Future
- Not-logged-in homepage changes that would encourage "public" users to search/browse
- Additional profile fields
- Comprehensive UI changes
- Allowing users to set future fields to be visible only to "staff" or "admin"
