CintaNotes Developer wrote:Actually I consider an error that CN locks when you minimize. IMO when an editor is open, CN should never lock.
Do you have another opinion?
It is a risk either way - unprotected data (no lock while editor is open) vs data loss (locks while editor is open, discarding all the user entered data). Personally, I would probably err on the side of caution here and disable locking while the editor is open (as long it is made clear to the user in the documentation that CN won't lock while an editor window is open).
CintaNotes Developer wrote:There's exactly one option that requires re-entering the old password: when you switch from 'don't remember' to 'remember'. Obviosly this is needed to have something to remember
And when toggling the 'protect this notebook with a password' option to 'off' as well I think? That would make two. Just looking at the options, these are the only two I would personally would require re-entering the old password on as well.
CintaNotes Developer wrote:I agree with that. Current design tries to fit too many use cases into one dialog and is thus confusing.
I'd say let the dialog display a bold status label like "Notebook is encrypted" with a button "Change password..." near it.
What do you think? would it be clearer?
Sounds reasonable to me.
CintaNotes Developer wrote:BTW I'm actively using password myself, and while at first it was constantly in my way, now with the "Remember password" option I hardly notice any niusance at all. I can clip notes without entering password, and all background ops are running.
I don't mind to have password stored on disk, as I only want to protect the notes from a random look, not from a determined hacker.
To everyone who uses password protection:What are your experiences in this regard? Please share. It's still not too late to fix design flaws
I like how it works now. We have an option to lock the database when manually minimising it, and we have an option to lock the database when CN minimises itself. Also an option for the user to let CN remember the password or to not remember the password. I have tried some basic testing on these - except for the remember password option (I am curious to see where the password is stored, and if it is stored decrypted or with some basic encryption applied) - and so far have found no problems. I think the warning is also clear, that the user will lose data if they forget the password. I like how this has been implemented so far
Chris
Edit: Actually, may have just found one issue. This is with the password not saved. I minimise CN to the tray, which locks the DB. I then double click the cintanotes.exe file again. This brings CN out of the tray, and displays a message that it has activated the already running CN instance. All ok so far. The problem is - you can actually see all the notes in the CN window, despite the database being protected by a password
Yes, you can only see however many notes the CN window can show at one time, and you may not be able to see all the text of any particular note - but you can see some things. At this point, when you acknowledge the message about the running instance, CN gives you a dialog box asking for the password. If you click Cancel, you i. Get an error dialog (copied below) and ii. You can still see the notes in the CN window.
---------------------------
[Error]
---------------------------
class app::dialogs::PasswordEnterCancelledException
---------------------------
OK
---------------------------
The error dialog when you click Cancel is understandable - but I think it needs to be reworded to be not as scary for a user. The bigger problem is being able to see some notes in the CN window without having entered the password. When you do click Cancel, after 5-10 seconds, CN will display the password dialog again, but you can just click Cancel once more. When I did this, CN did not display the password dialog again - it just left the window sitting there unlocked - until I clicked on the CN window itself.
