632933 - Mozilla Metrics should not be a private product

Status: RESOLVED FIXED

(bugzilla.mozilla.org :: Administration, task)

Description

[Max Kanat-Alexander]

Right now it looks like the Mozilla Metrics product is set to Mandatory/Mandatory for some group, which hides it from everybody who isn't in that group (and from all logged-out users). This makes it impossible for community members to effectively understand what is going on with Metrics or to effectively make requests to Metrics.

Comment 1

[Daniel Einspanjer [:dre] [:deinspanjer]]

I am happy to look for better ways to open this up.  There are three reasoms it is currently configured this way. If we can make simple changes that increase visibility while not compromising these points, I am happy to implement those changes.

1) references to internal applications
    Frequently, bugs that come in will be regarding a dashboard on metrics.mozilla.com or some other inward facing tool. Having these bugs be public would confuse people who dont have access and also gives unnecessary insight into internal infrastructure which increases surface area for attack vectors. If we required all internal users to evaluate whether they should turn on privacy, we would leak new bugs and adding security after creation creates further confusion and attention to what was in the bug before becoming private.

2) operational security data
    Metrics has administrative control over various parts of our infrastructure. As such, bugs frequently contain hostnames, configuration data, and machine or service account details. If this data were accidentally left public, it increases surface area and attack vectors and it is not useful to community members.

3) user private data
    Sometimes, analysis or especially troubleshooting/investigational bugs can contain log entries or other data that includes IP addresses, usernames, or email addresses of our users. This data needs to be secure against accidental exposure which would violate our users privacy.

Comment 2

[Daniel Einspanjer [:dre] [:deinspanjer]]

Adding Chris to CC to keep me honest on the value of protecting infrastructure information.

Comment 3

[Dave Miller [:justdave]]

I guess the main point here is that there currently doesn't appear to be an obvious place to file metrics-related bugs if you're not an employee.  Maybe it would make sense to have a separate public-facing component somewhere that would just be used for community-related requests.

Comment 4

[Daniel Einspanjer [:dre] [:deinspanjer]]

Is there any way we can make the product public but still have all bugs created default to have our security group enabled?

Comment 5

[Max Kanat-Alexander]

(In reply to comment #4)
> Is there any way we can make the product public but still have all bugs created
> default to have our security group enabled?

  Yeah, absolutely. In the Group Controls, set it Default/Default instead of Mandatory/Mandatory, and uncheck the "Entry" box. That would probably solve the problem. Then the product would show up as searchable and enterable against, but bugs would default to being protected.

Comment 6

[Daniel Einspanjer [:dre] [:deinspanjer]]

Okay, I don't have any sort of administrative controls over this product or bmo in general.  Can someone pick up this bug to implement this change?  Assuming verification that it will behave as intended.

Comment 7

[Gervase Markham [:gerv]]

I have updated the config as suggested by Max in comment 5.

Gerv