Re: Joins on capabilities that have passed through different membranes

Mike Stay <[email protected]> Tue, 5 Jan 2016 11:46:46 -0800
Newsgroups gmane.comp.capabilities.general
Message-ID <CAAvuwX_7TBatxzdvpymjCNL1sfjFo2NUbMRU9mGTGaUMcQFUqA@mail.gmail.com>
On Tue, Jan 5, 2016 at 11:14 AM, Alan Karp <[email protected]> wrote:
> Marc Stiegler came up with a clever UI affordance to make all this clear.
> If Ihab views the document with Kenton's capability, Ihab sees a ro view.
> If Ihab opens it with his own, he sees a rw view.  In either case, he see
> the same document, which reduces any possible confusion.  Since Ihab does
> have write permission, his UI has an Edit button (actually a tab in
> Stiegler's UI).

Google's UI researchers claimed to us that people would get a
read-only view from somewhere and then be confused when they couldn't
edit it, even when there was an edit button.  People don't look for
controls they don't expect to need.
-- 
Mike Stay
[email protected]