Closed Bug 1256293 Opened 8 years ago Closed 8 years ago

Add-ons developers should not be able to change/delete/edit reviews

Categories

(addons.mozilla.org :: Security, defect)

Product:
addons.mozilla.org
Component:
Security
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED INVALID

People

(Reporter: underpass_bugzilla, Unassigned)

Details

User Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0
Build ID: 20160303134406

Steps to reproduce:

It seems that the author(s) of a certain add-on is starting to delete negative reviews/comments in order to increase the average ranking.

I think that this should not be allowed. If an author changes his creations in a way that users don't like, users' comments must remain visible.

By now I will not name the add-on.
If you find it appropriate, I will provide the name.

Thanks for your attention.
First, this is not a security bug.

Second, developers cannot delete reviews, any user can flag a review for moderation and those reviews are handled by the independent reviewer team.
Status: UNCONFIRMED → RESOLVED
Closed: 8 years ago
Resolution: --- → INVALID
First: I know that this is not a security bug, but if I couldn't proceed without selecting a component and the only component available was "Security".

Second: probably the "review for moderation" feature has been abused and some 120 reviews have been deleted. If this is normal for you, perhaps is also normal to mark "INVALID" this bug.
Status: RESOLVED → UNCONFIRMED
Resolution: INVALID → ---
New issues should be filed at https://github.com/mozilla/addons-server/issues

If you have concrete examples, please provide them and we are happy to look into them, but otherwise there's not much we can do.
Status: UNCONFIRMED → RESOLVED
Closed: 8 years ago → 8 years ago
Resolution: --- → INVALID
(In reply to Andreas Wagner [:TheOne] from comment #3)
> New issues should be filed at https://github.com/mozilla/addons-server/issues

Is this a new policy? I've been filling up bugs with Bugzilla since 2008 or so.
Status: RESOLVED → UNCONFIRMED
Resolution: INVALID → ---
(In reply to Underpass from comment #4)
> (In reply to Andreas Wagner [:TheOne] from comment #3)
> > New issues should be filed at https://github.com/mozilla/addons-server/issues
> 
> Is this a new policy? I've been filling up bugs with Bugzilla since 2008 or
> so.

Yes. Much of add-ons has moved to GitHub issues; we posted about it in the dev-addons mailing list last month. https://mail.mozilla.org/pipermail/dev-addons/2016-February/000326.html
Please stop reopening this bug!
Status: UNCONFIRMED → RESOLVED
Closed: 8 years ago → 8 years ago
Resolution: --- → INVALID
You need to log in before you can comment on or make changes to this bug.