Always cc triage owner into security sensitive bugs
Categories
(bugzilla.mozilla.org :: General, enhancement)
Tracking
()
People
(Reporter: lizzard, Unassigned)
Details
We'd like to have triage owners always able to see the security-sensitive bugs in their component. When a bug is created as s-s or marked s-s, or the triage owner changes, there should be a check to see if the triage owner can see the bug and if not, add them to cc list.
We'd also want to mark current bugs this way so that we don't have to do it by hand (especially if it's possible to do this without changing the bug-last-changed date)
|
Reporter | |
Comment 1•6 years ago
|
||
Oops, there's already a bug for this.
|
|
Reporter | |
Comment 2•6 years ago
|
||
Though maybe we can do this separately as a script (at least for the current bugs/owners)
|
||
Comment 3•6 years ago
|
||
(In reply to Liz Henry (:lizzard) from comment #2)
Though maybe we can do this separately as a script (at least for the current bugs/owners)
No need for a script. It is a simple code change to enable triage owners to see a bug the same as cc members. And a migration script to add the triage owners to the cc list would require a code review just the same. So we will fix this with the former.
:dkl, we should schedule this work because it is affecting triage owners.
It'd also be better do this without a script because we'd need to clean up the bugs' cc list as the list of triage owners changes over time.
|
|
Reporter | |
Comment 6•6 years ago
|
||
Thank you! This should hopefully help a lot with security bug triage.
Description
•