View source for Privacy/Features/Site-based data management UI

{{FeatureStatus
|Feature name=Site-based data management UI
|Feature stage=Shipped
|Feature status=Complete
|Feature version=Firefox 6
|Feature health=OK
|Feature status note=Landed on mozilla-central.
}}
{{FeatureTeam
|Feature product manager=Asa Dotzler
|Feature feature manager=Sid Stamm
|Feature lead engineer=Margaret Leibovic
|Feature security lead=Curtis Koenig
|Feature privacy lead=Sid Stamm
|Feature qa lead=George Carstoiu
|Feature ux lead=Jennifer Boriss
}}
{{FeaturePageBody
|Feature overview=It's helpful to be able to control what sites know and do on a site-by-site basis.  Ideally, the site permissions dialog, cookie controls, and various other site-based preferences should be accessible via a single UI.

This feature will provide a UI in a content tab (much like the addons manager) that allows users to customize permissions and settings for sites on a site-by-site basis.

This feature falls primarily in the '''Experience''' category (from the "Discover, Experience, and Connect" vision statement.)
|Feature users and use cases=* Empower users to define data-sharing relationships with sites instead of with the various APIs in Firefox
* Provide a secure, non-spoofable way to set these preferences.
* Make it clear to users how they interact with each site (and all sites)
* Assure users that the interface is part of Firefox and cannot be manipulated by a web site.
|Feature requirements=* We need to document existing data sources and mappings to the user interface
* UI must be designed carefully, perhaps with a user study
* Security and authenticity of the configuration UI must be verified and accessible to users.
|Feature non-goals=* This is not an enhancement of the site identity door-hanger (Larry)
* This is not a new set of preferences or permissions, just a new interface to existing ones.
* This is not a visualization of how people interact with sites
* This is not in-flight configuration prompts or UX.
|Feature ux design=* There's a design motivation and prototype graphic in [https://bug573176.bugzilla.mozilla.org/attachment.cgi?id=452384 attachment 452384] on {{bug|573176}}.

The site-based prefs will be implemented in content at an about page (<code>about:permissions</code>).  It will be in-content (much like [about:addons]), and is intended to replace the various site-based or "all-sites" prefs and permissions that exist for:
* cookies
* passwords
* geolocation permission
* storage (IndexDB, localStorage)
* add-on installation permission
* pop-up blocking
* image loading permission
* HTTP Strict-Transport-Security setting
* (history and bookmarks)?  Maybe?

The UI will present a list of sites, searchable, ranked by frecency, complete with domain or subdomain name, site title, and favicon.  When a user selects a site, the preferences for that site will be displayed, and the user will have the opportunity to change the preferences for that specific domain or subdomain.

The UI will include the ability to sites not yet accessed; this will provide pre-access preferences for those users who wish to block images from specific sites or assert control before it is needed.
|Feature security review=* [[Security/Reviews/Firefox6/ReviewNotes/SiteDataUI|Security Notes]]
|Feature qa review=* [http://bit.ly/pKRZiR Remaining opened bugs]
* Main implementation bugs landed and were verified
* Smaller patches to land in the following milestones
|Feature implementation notes=* {{done|implement basic patch}}
* {{done|create basic test plan}}
* {{done|land patch for wider testing}}
* {{new|user study?}}
* {{ok|design UX}}
* {{ok|document data sources and mappings to UX}}
* {{new|security / privacy design discussion}}

* {{bug|573176}} Implement basic about:permissions interface
* {{bug|657961}} Use async API to get favicons for site permissions page

* {{bug|587208}} Need to create icons for the UI
* {{bug|658097}} Make permissions language easier to understand
* {{bug|588689}} Add access to site preferences from the site identity block
}}
{{FeatureInfo
|Feature priority=P1
|Feature roadmap=Privacy
|Feature theme=Enhance User Controlled Disclosure
|Feature list=Desktop
|Feature engineering team=Desktop front-end
}}
{{FeatureTeamStatus
|Feature security status=sec-review-complete
|Feature security health=OK
|Feature security notes=[[Security/Reviews/Firefox6/ReviewNotes/SiteDataUI|Notes]]
|Feature qa status=Ready to land in Fx6
|Feature qa notes=main bugs are verified
}}