As a Site Administrator, I want to configure a GDPR compliant cookie preference handling in my site

• Type: Story
• Status: Closed
• Priority: Minor
• Resolution: Completed
• Affects Version/s: None
• Fix Version/s: 7.4.13 DXP U66, Master
• Component/s: Information Security > Cookie Preference Settings
• Labels:
  • beyond_7.4
  • beyond_7.4-must
  • fc_22_03
  • fc_22_04
  • fc_22_05
  • fc_22_06
  • fc_22_07
  • fc_22_08
  • fc_22_09
• Epic Link: Support cookie compliance with GDPR
• Sprint: AppSec Iteration 82, AppSec Iteration 83, AppSec Iteration 84, AppSec Iteration 85, AppSec Iteration 86, AppSec Iteration 87, AppSec Iteration 88, AppSec Iteration 89, AppSec Iteration 90, AppSec Iteration 91, AppSec Iteration 92, AppSec Iteration 93, AppSec Iteration 94, AppSec Iteration 95, AppSec Iteration 96, AppSec Iteration 97
• Git Pull Request: https://github.com/brianchandotcom/liferay-portal/pull/117388

Motivation

We want to have a built in feature of cookie handling with which it's possible to make the site within the portal be GDPR compliant.

Design

https://www.figma.com/file/BFiKtvHk2qJqdI7FqAt4wC/?node-id=141%3A20553

Changes we decided to make for the sake of simplicity or because that would be significantly more effort to implement as it is in the original design:

1. The admin entries are:
   1. Banner
   2. "Consent Panel"
2. Banner config page entries
   1. The "Active on this site" switcher goes to the first config entry on the Banner config page as a checkbox.
   2. There is no change in the style of the config page at checking, unchecking the "Active on this site".
   3. The "Consent Panel" config menu option appears only if the "Active on this site" is checked on the Banner config page.
   4. "Consent Mode" is a checkbox.
   5. The "Privacy Policy Link" is a simple text field and the value of that must be a full URL. No radio, no picker.
   6. The following entries are not shown on the Banner config page:
      1. "Display in Page"
      2. "Accept All Label"
      3. "DeclineAll Label"
3. "Consent Panel" config page entries
   1. This config menu option appears only if the "Active on this site" is checked on the Banner config page.
   2. The "Privacy Policy Link" is a simple text field and the value of that must be a full URL. No radio, no picker.
   3. The "Cookie Preferences" categories' title and description must be the text from here: https://liferay.atlassian.net/wiki/spaces/ENGDXPONLINE/pages/1666810584/Cookies+in+Liferay+DXP+WIP#By-purpose
   4. "Pre-checked" checkboxes are clear by default.

Acceptance Criteria

• AC-1
  • Given that the Site Administrator can configure cookie handling
  • When the Site Administrator goes to the site configuration, Platform section and clicks on Cookies configuration entry
  • Then a configuration page appears with the possibilities of configuring
    1. Basic cookie handling
    2. How the cookie preference banner and the
    3. Cookie preference setting panel for End Users behave and look.

See the description of the sub tasks for further AC list.