{"action":"created","issue":{"url":"https://api.github.com/repos/openbankingspace/tpp-issues/issues/37","repository_url":"https://api.github.com/repos/openbankingspace/tpp-issues","labels_url":"https://api.github.com/repos/openbankingspace/tpp-issues/issues/37/labels{/name}","comments_url":"https://api.github.com/repos/openbankingspace/tpp-issues/issues/37/comments","events_url":"https://api.github.com/repos/openbankingspace/tpp-issues/issues/37/events","html_url":"https://github.com/openbankingspace/tpp-issues/issues/37","id":350880358,"node_id":"MDU6SXNzdWUzNTA4ODAzNTg=","number":37,"title":"Barclays: Consent instructions are incorrect.","user":{"login":"tobypinder","id":618992,"node_id":"MDQ6VXNlcjYxODk5Mg==","avatar_url":"https://avatars1.githubusercontent.com/u/618992?v=4","gravatar_id":"","url":"https://api.github.com/users/tobypinder","html_url":"https://github.com/tobypinder","followers_url":"https://api.github.com/users/tobypinder/followers","following_url":"https://api.github.com/users/tobypinder/following{/other_user}","gists_url":"https://api.github.com/users/tobypinder/gists{/gist_id}","starred_url":"https://api.github.com/users/tobypinder/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tobypinder/subscriptions","organizations_url":"https://api.github.com/users/tobypinder/orgs","repos_url":"https://api.github.com/users/tobypinder/repos","events_url":"https://api.github.com/users/tobypinder/events{/privacy}","received_events_url":"https://api.github.com/users/tobypinder/received_events","type":"User","site_admin":false},"labels":[{"id":1003281406,"node_id":"MDU6TGFiZWwxMDAzMjgxNDA2","url":"https://api.github.com/repos/openbankingspace/tpp-issues/labels/aspsp:barclays","name":"aspsp:barclays","color":"A5C4FF","default":false},{"id":1003356204,"node_id":"MDU6TGFiZWwxMDAzMzU2MjA0","url":"https://api.github.com/repos/openbankingspace/tpp-issues/labels/env:live","name":"env:live","color":"A5FFF9","default":false},{"id":1003295742,"node_id":"MDU6TGFiZWwxMDAzMjk1NzQy","url":"https://api.github.com/repos/openbankingspace/tpp-issues/labels/issue:usability","name":"issue:usability","color":"FFA7A5","default":false},{"id":1003300134,"node_id":"MDU6TGFiZWwxMDAzMzAwMTM0","url":"https://api.github.com/repos/openbankingspace/tpp-issues/labels/priority:high","name":"priority:high","color":"FFD9A5","default":false},{"id":1003291814,"node_id":"MDU6TGFiZWwxMDAzMjkxODE0","url":"https://api.github.com/repos/openbankingspace/tpp-issues/labels/type:auth","name":"type:auth","color":"F1FFA5","default":false}],"state":"open","locked":false,"assignee":{"login":"tobypinder","id":618992,"node_id":"MDQ6VXNlcjYxODk5Mg==","avatar_url":"https://avatars1.githubusercontent.com/u/618992?v=4","gravatar_id":"","url":"https://api.github.com/users/tobypinder","html_url":"https://github.com/tobypinder","followers_url":"https://api.github.com/users/tobypinder/followers","following_url":"https://api.github.com/users/tobypinder/following{/other_user}","gists_url":"https://api.github.com/users/tobypinder/gists{/gist_id}","starred_url":"https://api.github.com/users/tobypinder/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tobypinder/subscriptions","organizations_url":"https://api.github.com/users/tobypinder/orgs","repos_url":"https://api.github.com/users/tobypinder/repos","events_url":"https://api.github.com/users/tobypinder/events{/privacy}","received_events_url":"https://api.github.com/users/tobypinder/received_events","type":"User","site_admin":false},"assignees":[{"login":"tobypinder","id":618992,"node_id":"MDQ6VXNlcjYxODk5Mg==","avatar_url":"https://avatars1.githubusercontent.com/u/618992?v=4","gravatar_id":"","url":"https://api.github.com/users/tobypinder","html_url":"https://github.com/tobypinder","followers_url":"https://api.github.com/users/tobypinder/followers","following_url":"https://api.github.com/users/tobypinder/following{/other_user}","gists_url":"https://api.github.com/users/tobypinder/gists{/gist_id}","starred_url":"https://api.github.com/users/tobypinder/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tobypinder/subscriptions","organizations_url":"https://api.github.com/users/tobypinder/orgs","repos_url":"https://api.github.com/users/tobypinder/repos","events_url":"https://api.github.com/users/tobypinder/events{/privacy}","received_events_url":"https://api.github.com/users/tobypinder/received_events","type":"User","site_admin":false}],"milestone":null,"comments":0,"created_at":"2018-08-15T16:40:54Z","updated_at":"2018-08-20T15:30:53Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"# Consent instructions are incorrect.\r\n\r\nPSUs are given incorrect information on how to access consent interfaces in Barclays mobile and web interfaces. Both of these instructions are deficient, and lead to signficant PSU confusion.\r\n\r\n### Mobile\r\n\r\n![consent_instructions_incorrect mob](https://user-images.githubusercontent.com/618992/44160374-26c70480-a0b2-11e8-90e6-2f0bfd0e9366.png)\r\n\r\nAs seen above, the authorization server indicates that PSUs should access\r\n\r\n`More > Data and Privacy > Third-party permissions > Give your permission`\r\n\r\nHowever to access the Consent granting interface, PSUs must actually access\r\n\r\n`More > Settings > Third-party permissions > Give your permission`\r\n\r\n### Web\r\n\r\n![consent_instructions_incorrect web](https://user-images.githubusercontent.com/618992/44160387-2d557c00-a0b2-11e8-8996-3df9552fd947.png)\r\n\r\n\r\nAs seen above, the authorization server indicates that PSUs should access\r\n\r\n`Select Profile > Privacy and data permissions > Give third-party permission`\r\n\r\nHowever, in practice there is no section labelled \"Profile\" - regardless of any internal naming this is opaque to users and it's not clear how they would be expected to understand that the highlighted section of the page below is the \"Profile\".\r\n\r\n![consent_instructions_incorrect web ui1](https://user-images.githubusercontent.com/618992/44160399-32b2c680-a0b2-11e8-8a19-9a3d1929f7dc.png)\r\n\r\n![consent_instructions_incorrect web ui2](https://user-images.githubusercontent.com/618992/44160403-36464d80-a0b2-11e8-89ac-b5ccbe8f9d74.png)\r\n\r\n\r\n## Impact\r\n\r\nCritical. Credit Kudos is of the position that we cannot go live with an integration that gives erroneous and/or incomplete instructions to PSUs without expecting significant drop-off. We also feel this would be construed as an \"obstacle to the provision of [services]\" under _RTS Article 32 (3)_ in the current form.\r\n\r\n## Remediation\r\n\r\nRevise instructions given to PSUs.\r\n"},"comment":{"url":"https://api.github.com/repos/openbankingspace/tpp-issues/issues/comments/414359756","html_url":"https://github.com/openbankingspace/tpp-issues/issues/37#issuecomment-414359756","issue_url":"https://api.github.com/repos/openbankingspace/tpp-issues/issues/37","id":414359756,"node_id":"MDEyOklzc3VlQ29tbWVudDQxNDM1OTc1Ng==","user":{"login":"jspaine","id":6288863,"node_id":"MDQ6VXNlcjYyODg4NjM=","avatar_url":"https://avatars2.githubusercontent.com/u/6288863?v=4","gravatar_id":"","url":"https://api.github.com/users/jspaine","html_url":"https://github.com/jspaine","followers_url":"https://api.github.com/users/jspaine/followers","following_url":"https://api.github.com/users/jspaine/following{/other_user}","gists_url":"https://api.github.com/users/jspaine/gists{/gist_id}","starred_url":"https://api.github.com/users/jspaine/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jspaine/subscriptions","organizations_url":"https://api.github.com/users/jspaine/orgs","repos_url":"https://api.github.com/users/jspaine/repos","events_url":"https://api.github.com/users/jspaine/events{/privacy}","received_events_url":"https://api.github.com/users/jspaine/received_events","type":"User","site_admin":false},"created_at":"2018-08-20T15:30:53Z","updated_at":"2018-08-20T15:30:53Z","author_association":"NONE","body":"Have you reported this on OBSD?"}}
{"actor":{"display_login":"jspaine"}}