One Hundred Papercuts

Authentication doesn't explicitly ask for the user's password

Bug #636448 reported by Chris Wilson on 2010-09-12

This bug affects 1 person

	Status	Importance	Assigned to
One Hundred Papercuts	Triaged	Low	Unassigned
PolicyKit	Won't Fix	Medium	freedesktop-bugs #33184
policykit-gnome	New	High	gnome-bugs #529195
policykit-1-gnome (Ubuntu)	Triaged	Low	Unassigned

Bug Description

When the user is prompted to authenticate themselves, the prompt doesn't explicitly ask them for their their own password, rather they are simply asked to authenticate themselves. This can be confusing to less technologically savvy users who will think that they need to enter a different password.

Tags:

Revision history for this message

Matthew Paul Thomas (mpt) wrote on 2010-09-14:

Well spotted. There are different authentication methods, so we shouldn't ask for a password when (for example) you're supposed to get your fingerprint read instead. But in the case where there is a password field, the secondary text should say something like "Please enter your login password." instead of the over-long text about "An application is attempting to perform an action".

Changed in hundredpapercuts:
status:	New → Confirmed

Revision history for this message

Vish (vish) wrote on 2010-12-22:

This bug is an upstream one and it would be quite helpful if somebody experiencing it could send the bug the to the people writing the software. You can learn more about how to do this for various upstreams at https://wiki.ubuntu.com/Bugs/Upstream/GNOME .
Once submitted upstream , do report back here with the upstream bug number.Thanks in advance!

Changed in policykit-1-gnome (Ubuntu):
importance:	Undecided → Low
status:	New → Confirmed
Changed in hundredpapercuts:
importance:	Undecided → Low

Chris Wilson (notgary-deactivatedaccount) on 2011-01-18

summary:	- authentication doesn't explicitly ask for the users password + authentication doesn't explicitly ask for the user's password
summary:	- authentication doesn't explicitly ask for the user's password + Authentication doesn't explicitly ask for the user's password

Bug Watch Updater (bug-watch-updater) on 2011-01-24

Changed in policykit:
status:	Unknown → Confirmed

Revision history for this message

Chris Wilson (notgary-deactivatedaccount) wrote on 2011-01-26:

I've come up with the following alternative to the current text

"The action you are attempting to perform requires that you verify your identity to the system as a security precaution. Verify your identiy now by entering your user password below."

Also, I realise I've sent this too far upstream.

Chris Wilson (notgary-deactivatedaccount) on 2011-01-26

Changed in policykit-gnome:
importance:	Undecided → Unknown
status:	New → Unknown

Bug Watch Updater (bug-watch-updater) on 2011-01-26

Changed in policykit-gnome:
importance:	Unknown → High
status:	Unknown → New

Chris Wilson (notgary-deactivatedaccount) on 2011-01-26

Changed in hundredpapercuts:
assignee:	nobody → Chris Wilson (notgary)
status:	Confirmed → Triaged

Brian Murray (brian-murray) on 2011-01-27

Changed in policykit-1-gnome (Ubuntu):
status:	Confirmed → Triaged

Bug Watch Updater (bug-watch-updater) on 2011-01-29

Changed in policykit:
status:	Confirmed → Won't Fix

Revision history for this message

Chris Wilson (notgary-deactivatedaccount) wrote on 2011-02-03:

Unassigning myself. I don't have time to work on this.

Changed in hundredpapercuts:
assignee:	Chris Wilson (notgary) → nobody

Bug Watch Updater (bug-watch-updater) on 2011-02-04

Changed in policykit:
importance:	Unknown → Medium

Revision history for this message

Reuben Swartz (rbn-swartz) wrote on 2012-12-01:

the patch Edit (1.8 KiB, text/plain)

Changed the wording of the dialog this should be a little more user friendly now

changed src/polkitgnomeauthenticationdialog.c

Revision history for this message

Ubuntu Foundations Team Bug Bot (crichton) wrote on 2012-12-01:

The attachment "the patch" of this bug report has been identified as being a patch. The ubuntu-reviewers team has been subscribed to the bug report so that they can review the patch. In the event that this is in fact not a patch you can resolve this situation by removing the tag 'patch' from the bug report and editing the attachment so that it is not flagged as a patch. Additionally, if you are member of the ubuntu-reviewers team please also unsubscribe the team from this bug report.

[This is an automated message performed by a Launchpad user owned by Brian Murray. Please contact him regarding any issues with the action taken in this bug report.]

tags:

added: patch