Closed Bug 1779086 Opened 2 years ago Closed 2 years ago

[WEBHOOKS] When an author cannot see the bug or private comment/attachment do not send any data

Categories

(bugzilla.mozilla.org :: Extensions, enhancement)

enhancement

Tracking

()

RESOLVED FIXED

People

(Reporter: dkl, Assigned: dkl)

Details

Attachments

(1 file)

Similar to how we block users from seeing dependencies of secure bugs in a public bug if they user cannot see them, we will not send hook data to the endpoint when a secure bug is changed.

Currently we send a filtered down JSON structure to the API endpoint even if the user cannot see the bug/comment. We will no longer do that and just skip sending.

Note: We will still filter the JSON data to only the bug id if the bug is secure and the hook owner can see the bug.

Attached file GitHub Pull Request
Status: ASSIGNED → RESOLVED
Closed: 2 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: