Closed Bug 1446972 Opened 7 years ago Closed 7 years ago

Prevent direct changes to the subscribers list in confidential revisions

Categories

(Conduit :: Phabricator, enhancement)

Product:
Conduit
Component:
Phabricator
Type:
enhancement
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: zalun, Assigned: zalun)

References

Details

(Keywords: conduit-story, conduit-triaged)

Privileged users can add another user to subscription list on a secure revision in Phabricator. This is not synced to Bugzilla. This is a bad UX and a potential security threat. Bugzilla should be the only place to manage subscribers list on the security bugs.
Depends on: 1446973
Depends on: 1446974
Assignee: nobody → pzalewa
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.