mirror of
https://github.com/GSA/notifications-admin.git
synced 2026-02-23 20:01:01 -05:00
c31264d4c9
This commit changes all the places where a user would see the term ‘whitelist’ in the content of page to say guestlist instead. We’re removing the term ‘whitelist’ for two reasons. The first reason is that we agree with the National Cyber Security Centre say: > It's fairly common to say whitelisting and blacklisting to describe > desirable and undesirable things in cyber security. For instance, when > talking about which applications you will allow or deny on your > corporate network; or deciding which bad passwords you want your users > not to be able to use. > However, there's an issue with the terminology. It only makes sense if > you equate white with 'good, permitted, safe' and black with 'bad, > dangerous, forbidden'. There are some obvious problems with this. So > in the name of helping to stamp out racism in cyber security, we will > avoid this casually pejorative wording on our website in the future. > No, it's not the biggest issue in the world - but to borrow a slogan > from elsewhere: every little helps. – https://www.ncsc.gov.uk/blog-post/terminology-its-not-black-and-white The second reason is that we’ve observed some users think that they have to put recipients in the whitelist even when they’re already with in the team. We think that the term ‘whitelist’ might be reinforcing this mental model because of how ‘whitelists’ might work in other applications. We considered the following alternatives or concepts: - Development - Recipients - Sandbox - Extended team - Smoke test recipients - Allowed - Nominated - Bonus - Additional - Safe - Team list - Trusted contacts - Designated people - Guest list - Team key list We also considered not giving it a name, and explaining it as a nuance of how the team key works. After mocking this up it felt more disjoined. We think it’s still useful for the thing to have a name so that it’s easy to refer to between the docs and the UI. We like the term ‘guest list’ because: - of how it sits with team members – members and guests in the abstract - a guest list is a concept that a lot of people will be familiar with – a list of people who can access a thing - ‘guest’ is very different to ‘recipient’ – we want to mitigate any confusion between this and the (emergency) contact lists
65 lines
2.0 KiB
HTML
65 lines
2.0 KiB
HTML
{% extends "withnav_template.html" %}
|
||
{% from "components/table.html" import list_table, field, hidden_field_heading %}
|
||
{% from "components/page-header.html" import page_header %}
|
||
{% from "components/button/macro.njk" import govukButton %}
|
||
|
||
{% block service_page_title %}
|
||
API keys
|
||
{% endblock %}
|
||
|
||
{% block maincolumn_content %}
|
||
|
||
{{ page_header(
|
||
'API keys',
|
||
back_link=url_for('main.api_integration', service_id=current_service.id)
|
||
) }}
|
||
|
||
<div class="body-copy-table">
|
||
{% call(item, row_number) list_table(
|
||
current_service.api_keys,
|
||
empty_message="You have not created any API keys yet",
|
||
caption="API keys",
|
||
caption_visible=false,
|
||
field_headings=[
|
||
'API keys',
|
||
'Action'
|
||
],
|
||
field_headings_visible=False
|
||
) %}
|
||
{% call field() %}
|
||
<div class="file-list">
|
||
{{ item.name }}
|
||
<div class="hint">
|
||
{% if item.key_type == 'normal' %}
|
||
Live – sends to anyone
|
||
{% elif item.key_type == 'team' %}
|
||
Team and guest list – limits who you can send to
|
||
{% elif item.key_type == 'test' %}
|
||
Test – pretends to send messages
|
||
{% endif %}
|
||
</div>
|
||
</div>
|
||
{% endcall %}
|
||
{% if item.expiry_date %}
|
||
{% call field(align='right') %}
|
||
<span class='hint'>Revoked {{ item.expiry_date|format_datetime_short }}</span>
|
||
{% endcall %}
|
||
{% else %}
|
||
{% call field(align='right', status='error') %}
|
||
<a class="govuk-link govuk-link--no-visited-state" href='{{ url_for('.revoke_api_key', service_id=current_service.id, key_id=item.id) }}'>Revoke</a>
|
||
{% endcall %}
|
||
{% endif %}
|
||
{% endcall %}
|
||
</div>
|
||
|
||
<div class="js-stick-at-bottom-when-scrolling">
|
||
{{ govukButton({
|
||
"element": "a",
|
||
"text": "Create an API key",
|
||
"href": url_for('.create_api_key', service_id=current_service.id),
|
||
"classes": "govuk-button--secondary"
|
||
}) }}
|
||
</div>
|
||
|
||
{% endblock %}
|