Closed Bug 1196291 Opened 10 years ago Closed 3 years ago

Prevent users without editbugs from commenting on resolved bugs, unless they are already involved in the bug

Categories

(bugzilla.mozilla.org :: Bug Creation/Editing, enhancement)

Production
enhancement
Not set
normal

Tracking

()

RESOLVED FIXED

People

(Reporter: Gijs, Assigned: dkl)

References

(Regressed 2 open bugs)

Details

(Keywords: ux-error-prevention)

Attachments

(1 file)

46 bytes, text/x-github-pull-request
Details | Review
See http://www.gijsk.com/blog/2015/08/why-you-might-be-asked-to-file-a-new-bugissue-instead-of-commenting-on-old-ones/ . It would be nice if bugzilla helped avoid this by making it easy for people to file a new bug instead, and gathering the same data we get from new bugs (UA, detailed steps to reproduce).
(...continuing from IRC...) It's also a useful self-triage mechanism. If a user has found a bug close to their existing issues, we can use that to help them file a new bug in the right spot automagically. We might want to have a grace-period involved, to allow commenting on recently-closed bugs. I'm mostly saddened by this happening in old bugs, where users are basically talking to an empty room. But Gijs' points are still valid no matter what the age. And, really, if it's simple and painless to get a new bug filed, everyone still wins. I was also thinking about cases where there's still ongoing activity / discussion / concerns in the bug, even though it's closed. But the more I think about it, the more I'm starting to think even that might be best to bump to a followup bug.
Perhaps with a checkbox to comment on the old bug? "I filed a followup: bug <N>, <summary>"
Assignee: nobody → glob
Summary: Close untouched closed bugs for comments from users without canconfirm/editbugs, and place an explanation plus a link to something like "clone this bug" UI → Close untouched closed bugs for comments from users without editbugs, and place an explanation plus a link to something like "clone this bug" UI
Assignee: glob → nobody
Type: defect → enhancement
See Also: → 1601392
See Also: → 1550406

Bug 1364947 points to cloning bugs as an abuse vector, so we shouldn't encourage that (in fact we should discourage it by fixing that bug).

See Also: → 1364947
Summary: Close untouched closed bugs for comments from users without editbugs, and place an explanation plus a link to something like "clone this bug" UI → Prevent users without editbugs from commenting on resolved bugs, unless they are already involved in the bug
Assignee: nobody → dkl
Status: NEW → ASSIGNED

(In reply to :glob ✱ from comment #5)

Bug 1364947 points to cloning bugs as an abuse vector

Preventing cloning is unlikely to have prevented the specific situation that prompted bug 1364947. People wanted a place to vent and cloning was easy, but manually creating a new bug isn't much more work. Manually copying all 50+ participants would have been more work so we might save spamming some of the original participants, but I bet a bug filer in such a situation will make sure the prominent folks (assignee, reviewers, notable arguers) are copied.

If we're disabling comments for spam prevention, cloning is not a big worry. New bugs get triaged and noticed, and getting noticed is the last thing these spammers seem to want. That's my guess for why they repeatedly comment in the same bugs: if no one's taking much notice of them it's safer to keep plugging that same spot than spreading into different old bugs whose participants might get pissed off enough to block them.

This is not so much to argue against fixing bug 1364947 (it might help some), but fixing this bug will have far more benefit. I hope the two bugs don't get tied together into some larger chunk of work that will delay this aspect.

Attached file GitHub Pull Request
Status: ASSIGNED → RESOLVED
Closed: 3 years ago
Resolution: --- → FIXED

This is live in production.

Duplicate of this bug: 1922619
Regressions: 1930386
Regressions: 1936487
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: