rubyforgood/voices-of-consent

Friendly access denied message pages

Open

#56 opened on Jul 26, 2019

View on GitHub
 (4 comments) (0 reactions) (0 assignees)Ruby (80 forks)auto 404
Priority: Lowhelp wanted

Repository metrics

Stars
 (40 stars)
PR merge metrics
 (PR metrics pending)

Description

When a volunteer is logged in and tries to access a page that requires specific permissions and the volunteer does not have those permissions, we should display a friendly error message page.

We should probably start with a friendly, generic permission denied page for any logged-in volunteer with access denied. We can then tailor that page for specific categories of access and restriction if we want to do that later.

A friendly page should show up when volunteers tries to act in a role they don't have permissions for, and a friendly page should also show when volunteers tried to claim things that a different volunteer has already claimed.

Contributor guide

Research direction
Look at the existing authorization logic to determine where to add a permission check and create a new view for the denied page.
Tech stack
ruby
Domain
backendfrontend
Issue type
Feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
2
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
Half day
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
RubyBasic understanding of web app permissions
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
70