Info boxes about locking panels (without actually doing it) #171
Conversation
mccalluc
changed the title
There was a problem hiding this comment.
I think the explanatory text is good, it describes well why the user shouldn't go back and tweak the inputs.
One comment on the locking behavior - could we make the lock only appear if the user has actually downloaded the release, as opposed to just viewing the download page?
I'm leaving this as a comment rather than approving, because @mccalluc mentioned that he would like @Shoeboxam's feedback on this.
Right now the final tab is just buttons, but my sense is that we may want to include a summary of the results on that page itself... perhaps the graphs? so the release would happen when you enter that tab by clicking the submit button on the previous tab. I think consistency in the locking behavior would be good: When you submit your selections on one page they are fixed, whether that is the first or the second tab. |
|
@mccalluc, ok if the release is going to appear on the page itself, I think that makes sense. Do you want me to go ahead and approve this or wait for comments from Mike? |
|
@ekraffmiller, I'll wait for Mike's thoughts, so probably better to just to leave this as a comment so I don't merge it by mistake. Thanks for the feedback. |
| Once you've confirmed your analysis settings | ||
| they are locked. The privacy budget should be considered | ||
| a finite resource. |
There was a problem hiding this comment.
Upon further consideration, I've weakened the "we should lock once set" opinion I had, because I had a specific vision that may not be consistent with the intended use-case.
I think there are two modes:
- privacy unit and loss are configured externally and can never be changed
- privacy unit and loss are configured by analyst and can be changed, but with some cautions:
What to caution about:
- If there are existing releases, state that changing the privacy unit will re-run the release? Or maybe reset all stats? It should explain that changing the privacy unit is resetting the app in some way, or causing new releases to be run, and dropping the previous privacy spend. As we move forward, you (Chuck) may want to keep in mind that changing the input metric (from symmetric distance to user id distance, for example) could potentially make later queries invalid.
- The privacy unit has a significant impact on the integrity of the privacy guarantee. Please carefully consider if your new privacy unit is meaningful. While making your privacy unit more fine-grained can give the appearance of greater utility for the same privacy loss, it commensurately weakens the strength of the privacy guarantee.
There's enough here that I'd like sign off from @Shoeboxam and someone else before going farther.
For reviewers: