Making policy decisions disappear into the user's workflow
Alan H. Karp, Marc Stiegler · 2010
Complaints of security interfering with getting work done often arise when users are distracted from their tasks to make policy decisions. We have identified what is missing from earlier security interaction designs that leads to these interruptions. Explicitly representing policy decisions in the user interface as items relevant to the application and providing application-specific controls for changing those policies has allowed us to reliably infer users' desired policy decisions from actions they take as they work. This paper describes the underlying principles and how they resulted in an interaction design that does not interfere with the user's work.