1443655 - New product for Focus security bugs

Status: RESOLVED FIXED

(bugzilla.mozilla.org :: Administration, task, P1)

Description

[Daniel Veditz [:dveditz]]

Focus issues are being tracked in github (the old Focus-iOS product has been retired) but that's not working for security bugs that need to be hidden and tie into other security triage mechanisms. We'd like a new product that's just for security bugs.

Product:        Focus
Classification: Client Software
Security Group: firefox-core-security  (we could even default this on new bugs)
Description:    Security bugs in the Focus mobile clients.
                All other bugs should be filed in github (more info)

                'more info' should link to
                https://github.com/mozilla-mobile/


Component:   Security: Android
Description: Security bugs in Focus for Android. Other Focus for Android bugs
             should be filed at 
             https://github.com/mozilla-mobile/focus-android/issues
Triage Owner: [e-mail] 


Component:   Security: iOS
Description: Security bugs in Focus for iOS. Other Focus for iOS bugs should be
             filed at https://github.com/mozilla-mobile/focus-ios/issues
Triage Owner: [e-mail]

Comment 1

[Daniel Veditz [:dveditz]]

> firefox-core-security  (we could even default this on new bugs)

We will want to unhide fixed and invalid bugs so I don't want a "permanently in the group" set-up like Legal bugs. Default checked when filing a bug might be nice if we already have that feature, but not worth any work if we don't.

Comment 2

[Emma Humphries ☕️🎸🧞‍♀️✨ (she/they) [:emceeaich] (Pacific Time) use needinfo]

Do we want to combine bug 1443383 or keep separate?

Comment 3

[Emma Humphries ☕️🎸🧞‍♀️✨ (she/they) [:emceeaich] (Pacific Time) use needinfo]

I've created the product and components, but not turned it on for bug entry yet. 

I need to get a list of versions for Focus that bugs can be filed against. That will have to be shared across Android and iOS. 

Also, what tracking and status flags should be added or enabled?

Comment 4

[Wesley Huang [:wesley_huang] (EPM) (NI me)]

(In reply to Emma Humphries, Bugmaster ☕️ (she/her) [:emceeaich] (UTC-8) needinfo? me from comment #2)
> Do we want to combine bug 1443383 or keep separate?

Let's keep separate so that wouldn't confuse people.
We are expecting to have various derived applications coming out under "Emerging Market".

Comment 5

[:sdaswani]

Emmy, sure thing - you can start with 4.0, 4.1, 5.0, 5.1 and 5.2.

Comment 6

[Daniel Veditz [:dveditz]]

I would have said combine them, but then we'd need a different product name (like "New Mobile Experience") and adjust the components to be like "Security: Focus for iOS". Would make it harder for people trying to file Focus bugs to find it, and in the other bug Wesley mentioned having future products. Separate works for me fine, too!

Comment 7

[:sdaswani]

Thanks Emma!