= Exploratory Testing - Disclosure: Trusted Pickers =

|| LEP || https://dev.launchpad.net/LEP/TrustedPickers ||
|| Bugs|| http://launchpad.net/launchpad/+bugs?field.tag=exploratory-testing+disclosure&field.tags_combinator=ALL ||
|| Author || Product team ||


== Summary ==


== Findings ==

 * Bug:797811: person picker text box should have focus when opened

 * I searched for "jml", which correctly returned Jono (~jml) as first match. Cool! I tried that to myself and it worked, that's awesome. Before that, searching for ursinha was inconclusive, which was weird.
 * I searched for "Jonathan", and jml was the second match, first was "Jonathan Carter", username jonathan, which made me wonder for a second if the context should be more important than the perfect match itself. 
 * Bug:797820: searching for the last name makes still hard to find the person
    * I searched for "lange" and I only found jml in the 9th page, last entry that page.

 * Searching "launchpad" gave "Loading results failed" with no explanation (or if I'd already done a search and then tried searching for "launchpad" it would just spin indefinitely), but everything else I tried worked (or told me there were no results).

 * Bug:798764: User affilition with the context is unclear.
    * When I try to assign a bug in Launchpad and search for "huw" I notice there is a little LP icon next to my name but no explanation of what it means. I'm guessing it means I'm a member of the team that owns the project of the bug I'm assigning someone to. If so it might be better to indicate that in a more obvious way (quite possibly with text) as it would seem quite important.
    * when I search for matsubara on the oops-tools project to assign driver, there's no UI saying matsubara is related to the project (I'm the owner). Must #2 from the LEP says the context should show the affiliation

 * Bug:798778: It would be good to have a visual separator between the search results and the remove/assign me links. At the moment they are under the heading "Search for people or teams". Possibly we should hide these links when there are search results. At the very least we need to make it clear that those links have nothing to do with the search results.

 * Bug:798775: Should the "Remove assignee" link be hidden if there is currently no assignee?

 * Bug:798772: Pagination should probably appear after the results, not before.

 * Bug:798759: The "details..." link is really confusing.
    * I think the link should be blue. The action it is taking is to open a new window (or tab) with the user's profile. Green links are for making an action that changes something on the current page. Yes, you do not lose anything on the current page but the result is that you are taken to a new window and completely different page. I have had a discussion with wallyworld and wgrant on IRC about this already.
    * The elipses also implies that you will be affecting (possibly revealing further info on) the current page.
    * I think think the wording is also confusing. The action is "give me the user's profile (so that I can find whatever info I might need to make this decision)" not "give me a few more details to help me make this decision" as I think the currently link implies. Maybe it could read "View profile".
    * When you click details a new page/tab opens up. I was expecting some kind of fold opening up and showing the relevant details and the LEP specifically mentions the fact that users shouldn't go to a second page while using the picker (must not #1)
 * Bug:798746: If you search for a deactivated user, it still show in results, if you choose it and click save changes, you'll get a "constraints not satisfied error" and a suggestion in a combo box to choose that user.
 * Bug:798740: when you get a timeout using the project picker, the error screen is broken.
 * Bug:798847: searching a partial IRC nickname doesn't return the intended user.

 * I think it needs to be more obvious that clicking the user in the search results will assign the person. It's not currently clear that clicking them is the final step. This could be done with a heading or an "assign" button for each user or something. At the moment there is no hint to what clicking the user will do... it could be to prefill the search box, or any number of other things. Not having remove/assign me links at the bottom as I mentioned above may help with this somewhat.

 * privacy concern: searching for a user who has the email address hidden using partially the email address (e.g. diogo.matsubara) displays users who have the user email address hidden. this might be a vector to figure out hidden addresses from users. If you search for an exact match, you'll get the result as a hidden email address. This might be a compromise between usability vs security
 * selecting driver for a project: on the oops-tools project, search for oops. results show a lot of users with oops in their name which are not related at all with the project while the oops-tools-dev team which is the owner appear in the second page of results.
 * project group picker show GNOME as the last result and it's an exact match (maybe out of scope for this LEP)


=== 2011-06-30 ===

 * [[Bug:803990]]: person picker in bug reports hides the header for non affiliated people.
 * [[Bug:803996]]: person picker widget doesn't show link to unassign myself