1205748 - Can't mark inaccessible bug dependent on a regression it caused

Status: RESOLVED FIXED

(bugzilla.mozilla.org :: General, defect)

Description

[Boris Zbarsky [:bzbarsky]]

Until I was cced on bug 1203078, I could not add it as a dependency of bug 1205741 (a regression it caused).

This is pretty user-hostile; if someone has gone to the trouble of finding that a restricted bug caused a regression, I see no reason to prevent them from flagging that in Bugzilla.  Especially now that for most people doing triage most security bugs are restricted.

Comment 1

[:glob ✱]

this is asking for bug 141593 to be reverted - there were security concerns that resulted in the current check.
it's likely the landscape has changed a lot since then, so i think it should be ok to lift this restriction.

i'll raise this as a discussion point in our next meeting.

Comment 2

[:glob ✱]

we'd probably want to lift this restriction for users with canconfirm/editbugs, not everyone.

Comment 3

[Boris Zbarsky [:bzbarsky]]

Note that for my purposes I don't need to be able to _remove_ dependencies, only add them.  And really only in one direction.

Of course if we had an explicit "X is a regression caused by Y" flag, I'd just need to be able to set that flag... ;)

Comment 4

[:glob ✱]

we discussed this in the meeting -- we'll do this limited to users with editbugs.

Comment 5

[:glob ✱]

Attachment: 1205748_1.patch

Comment 6

[Dylan Hardison [:dylan] (he/him)]

Comment on attachment 8667907 [details] [diff] [review]
1205748_1.patch

Review of attachment 8667907 [details] [diff] [review]:
-----------------------------------------------------------------

r=dylan

Comment 7

[:glob ✱]

To ssh://[e-mail]/webtools/bmo/bugzilla.git
   200cbd8..42270ff  master -> master