As a Site Administrator, I want the cookie preference handling configuration entries to be separated better by their purposes

• Type: Story
• Status: Closed
• Priority: Minor
• Resolution: Completed
• Affects Version/s: None
• Fix Version/s: 7.4.13 DXP U66, Master
• Component/s: Information Security > Cookie Preference Settings
• Labels:
  • 7.4.13-u30
  • beyond_7.4
  • beyond_7.4-must
  • fc_22_05
  • fc_22_06
  • liferay-update-dxp-30-7413
  • pt-app-security-review
• Epic Link: Support cookie compliance with GDPR
• Sprint: AppSec Iteration 90
• Git Pull Request: https://github.com/liferay-appsec/liferay-portal/pull/684

Motivation

According to the current behaviour, the Enabled and the "Explicit Cookie Consent Mode" checkboxes are at the top of the Banner config page. These configuration entries should be separated from the Banner config. The Enabled is about enabling the complete function with the Banner and the "Consent Panel", while the "Explicit Cookie Consent Mode" is a config for the cookie handling by default without having the end user's preferences saved. None of them is about the content of the Banner that is the purpose of the Banner config page.

Acceptance Criteria

1. AC-1
   • Given that the Site Administrator can configure cookie handling
   • When the Site Administrator goes to the site configuration, Platform section and clicks on Cookies configuration entry
   • Then a "Cookie Preference Handling" configuration page appears with two checkboxes:
     1. Enabled: for enabling the whole cookie preference handle for having end users to give their consent for storing cookies and
     2. "Explicit Cookie Consent Mode": for prevent any cookies being set until the user agrees to cookie usages. Otherwise, all cookies are set until the user opts out of them.
2. AC-2
   • Given that the Site Administrator can configure cookie handling
   • When the Site Administrator goes to the site configuration, Platform section, clicks on Cookies configuration entry and enables the cookie preference handling by checking the Enabled checkbox and clicking on the Save button
   • Then two new configuration link appears right below the "Cookie Preference Handling", the Banner and the "Consent Panel" configuration.
3. AC-3
   • Given a "Cookie Preference Handling" has been enabled,
   • When the End User first visits the site,
   • Then they see the Cookie Banner according to the configuration set by the site admin.