Content
View differences
Updated by Parimal Satyal about 1 year ago
* Administration: there are new role permissions:
* View internal comments with restricted visibility
* Write internal comments with restricted visibility
* Edit own internal comments with restricted visibility
* Edit others' internal comments with restricted visibility (for moderation)
* When I write a comment, I can choose to make it internal restrict its visibility
* There is a checkbox to enable this
* There is a "More info" button that takes the user to the documentation of the feature.
* The background colour of the comment box will change the to same colour as top info line of Internal restricted-visibility comments in the Activity stream to reassure the user that this mode is indeed active with a clear visual signal.
* [Primer colours](https://primer.style/foundations/color/base-scales) to use:
* **Background info line:** `display-brown-bgColor-muted`
* **Background body**: `bgColor-default`
* **Text:** `fgColor-default`
* **Outline:** `display-brown-borderColor-emphasis`
* These colours will automatically adjust to dark mode (Primer feature)
* If a comment is internal, restricted-visibility, it is easily distinguishable from other comments (that are public) so I can be reassured that they can't be publicly visible.
* Internal Restricted-visibility comments appear in a different colour scheme (defined above)
* There is a lock icon on the top right corner to the left of the More icon.
* There is an alt text: "Only visible to a limited group of members."
* _This will eventually show a Primer tooltip and lead to the Members page on click. See out of scope._
* If there is also an unread badge, this will appear to the _left_ of the lock icon
* Normal (public) comments with _not_ have an unlocked icon
* Quoting is possible. However, when quoting a internal comment, comment with restricted visibility, that comment must also be confidential by default
* The 'Internal comment' 'Restrict visibility' checkbox is checked
* _Risk: the user inadvertently some how unchecks this but leaks the comment. But they could just also well copy/paste a internal restricted comment._
* This is to limit the risk of accidental/inadvertent leaking of the comment.
* Notifications: internal restricted visibility comments will also appear in the notification center just like comments if I have access to them
* Same with email notifications
* It should not be possible to _@mention_ users who will not be able to view the internal comment the comment with restricted visibilty (i.e, the drop-down needs to exclude users without the requisite permissions)
* If a user who does not have the permissions to view Internal restricted-visibility comments is mentioned in a regular comment and the 'Internal comment' 'Restrict visibility' checkbox is _then_ checked, the @mention is turned into plain text.
* Unchecking the "Internal comment" "Restrict visibility" checkbox will _not_ re-convert previously stripped @mentions back to links.
* If were part of a role that afforded you the ability to view internal restricted visibility comments and you are subsequently removed from this role such that you no longer have this permission:
* You can no longer view or post such comments in the Activity tab
* The Notification centre should not break (because it can no longer find the missing notification)
* The notifications will stop, but for unread and past notifications:
* Internal comments Restricted visibilty comments are now hidden
* No other changes (to # of notifications, badges...)
* _Risk: Any email notification sent cannot obviously be retracted._
* There is no visible numbering of activity comments anymore for all comments (internal or (restricted visibilty or otherwise),
* Ideally, old links with `#activity-<comment-number>` still work.
* Copying the URL of a comment will have a new URL scheme including a real, persistent ID and not a generated number anymore so that it stays the same even when other comments are added or removed from the activity, e.g. #comment-<journal-id>
* When that URL is opened the browser will auto-scroll to have the comment in the visible viewport.
* When there is not Enterprise token, or the token does not allow this feature:
* We still show the permissions in the role administration and leave them editable.
* We don't show the toggle/checkbox to make a new comment a internal restricted comment.
* We show a banner at the project setting for enabling the feature.
* internal Restricted visibility comments can be enabed/disabled at a project level
* There will be in a new tab called 'Activity' in the new consolidated 'Work packages' page in Project settings.
* In this tab, there is a single checkbox with:
* Label: "Enable internal restricted visibility comments"
* Caption: "internal "Restricted comments allow an internal team to communicate amongst themselves privately. These are only visible to select roles that have the necessary permissions and will not be visible publicly. Read more."
* The "Read more" is a link that links to the documentation for this feature.
<br>
**Mobile specificities**
* On narrow screens, internal comments on comments with restricted on the timeline are displayed the same way as the mobile rendering of normal comments, but with the additional elements:
* Different background colours
* The lock icon
* When writing a comment, the "Internal comment" "Restrict visibilty" action uses the same string, but the 'Reed more' link is hidden
**Permissions and visibility considerations**
* The 'Last updated' field will be updated when an internal comment a restricted-visibility comment is posted; even users who do _not_ have the permissions to view them will see that something has changed, but will be unable to see what that is.
* Relevant: ##62473
* It is important the visibility of Internal restricted-visibility comments is also permission-controlled in other places where Activity is reported:
* Project activity
* User activity
**Translation considerations**
* Action: "Internal comment" "Restrict visibility"
* DE: "" "Sichtbarkeit einschränken"
* FR: "Commentaire interne" "Restreindre la visibilité"
* ES: "" "Restringir visibilidad"
* Feature name: "Internal "Restricted-visibility comments"
* DE: "" "Restricted-visibility comments"
* FR: "Commentaires internes" à visibilité restreinte"
* ES: "" "Comentarios con visibilidad restringida"
* Permission: "View internal comments" comments with restricted visibility"
* DE: "" ?
* FR: "Lire des commentaires internes" à visibilité restreinte"
* ES: "" "Vista de los comentarios con visibilidad restringida"
* View internal comments
* Write internal comments
* Edit own internal comments
* Edit others' internal comments
* When I write a comment, I can choose to make it internal
* There is a checkbox to enable this
* There is a "More info" button that takes the user to the documentation of the feature.
* The background colour of the comment box will change the to same colour as top info line of Internal
* [Primer colours](https://primer.style/foundations/color/base-scales) to use:
* **Background info line:** `display-brown-bgColor-muted`
* **Background body**: `bgColor-default`
* **Text:** `fgColor-default`
* **Outline:** `display-brown-borderColor-emphasis`
* These colours will automatically adjust to dark mode (Primer feature)
* If a comment is internal,
* Internal
* There is a lock icon on the top right corner to the left of the More icon.
* There is an alt text: "Only visible to a limited group of members."
* _This will eventually show a Primer tooltip and lead to the Members page on click. See out of scope._
* If there is also an unread badge, this will appear to the _left_ of the lock icon
* Normal (public) comments with _not_ have an unlocked icon
* Quoting is possible. However, when quoting a internal comment,
* The 'Internal comment'
* _Risk: the user inadvertently some how unchecks this but leaks the comment. But they could just also well copy/paste a internal
* This is to limit the risk of accidental/inadvertent leaking of the comment.
* Notifications: internal
* Same with email notifications
* It should not be possible to _@mention_ users who will not be able to view the internal comment
* If a user who does not have the permissions to view Internal
* Unchecking the "Internal comment"
* If were part of a role that afforded you the ability to view internal
* You can no longer view or post such comments in the Activity tab
* The Notification centre should not break (because it can no longer find the missing notification)
* The notifications will stop, but for unread and past notifications:
* Internal comments
* No other changes (to # of notifications, badges...)
* _Risk: Any email notification sent cannot obviously be retracted._
* There is no visible numbering of activity comments anymore for all comments (internal or
* Ideally, old links with `#activity-<comment-number>` still work.
* Copying the URL of a comment will have a new URL scheme including a real, persistent ID and not a generated number anymore so that it stays the same even when other comments are added or removed from the activity, e.g. #comment-<journal-id>
* When that URL is opened the browser will auto-scroll to have the comment in the visible viewport.
* When there is not Enterprise token, or the token does not allow this feature:
* We still show the permissions in the role administration and leave them editable.
* We don't show the toggle/checkbox to make a new comment a internal
* We show a banner at the project setting for enabling the feature.
* internal
* There will be in a new tab called 'Activity' in the new consolidated 'Work packages' page in Project settings.
* In this tab, there is a single checkbox with:
* Label: "Enable internal
* Caption: "internal
* The "Read more" is a link that links to the documentation for this feature.
<br>
* On narrow screens, internal comments on
* Different background colours
* The lock icon
* When writing a comment, the "Internal comment"
**Permissions and visibility considerations**
* The 'Last updated' field will be updated when an internal comment
* Relevant: ##62473
* It is important the visibility of Internal
* Project activity
* User activity
**Translation considerations**
* Action: "Internal comment"
* DE: ""
* FR: "Commentaire interne"
* ES: ""
* Feature name: "Internal
* DE: ""
* FR: "Commentaires internes"
* ES: ""
* Permission: "View internal comments"
* DE: ""
* FR: "Lire des commentaires internes"
* ES: ""