279877 - while creating a new bug, all available products are displayed, even the user has no permission to view them

Status: VERIFIED WORKSFORME

(Bugzilla :: Query/Bug List, defect)

Description

[Björn Teipel]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.3) Gecko/20040910
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.3) Gecko/20040910

As of Bugzilla 2.16.x, users which were not allowed for a product couldn't see
them, this is in my eyes correct. After migrating a bugzilla 2.16.4 installation
to bugzilla 2.18.0 i was surprised, that these users can see ALL products (while
searching and creating for bugs)

Why should a user see a product, where he can't create bugs for ?
Even if you have multiple customers which are now able to see different products
for other companies, this is not a nice thing.

Reproducible: Always

Steps to Reproduce:
1. User login
2. User will see all products at site "Find a Specific Bug" directly after login
3. User creates a new bug, all products are displayed

Actual Results:  
created this bug

Expected Results:  
same behavior as version 2.16.4

Comment 1

[Marc Schumann [:Wurblzap]]

Björn, this can be configured by the useentrygroupdefault parameter.

Comment 2

[Björn Teipel]

Attachment: Site "new Bug" as of version 2.16.4

Comment 3

[Björn Teipel]

Attachment: Site "new Bug" as of Version 2.18

Comment 4

[Björn Teipel]

This parameter useentrygroupdefault is already "on".

I just want to let you know, the checksetup.pl has done some migrations for the
mysqlDB.

Comment 5

[Marc Schumann [:Wurblzap]]

I really cannot reproduce this.
Can you please double-check that there is "Entry" selected for the correct
groups in the products' group controls?

Comment 6

[Björn Teipel]

Attachment: Access control for an example group

Comment 7

[Marc Schumann [:Wurblzap]]

(In reply to comment #6)

Yes, that check mark is missing. The explanation of the "Entry" column will tell
you the details.

Comment 8

[Björn Teipel]

I've attached (#17243) an image which shows an product access group after
migration. What does "Entry" stands for ?

I've just marked one product with entry and i was wondering why bugzilla was
droping some things.

Comment 9

[Björn Teipel]

Maybe this can be an migration issue, if useentrygroupdefault is checked, that
all products should be marked as entry per default ?

Comment 10

[Marc Schumann [:Wurblzap]]

(In reply to comment #9)
> Maybe this can be an migration issue, if useentrygroupdefault is checked, that
> all products should be marked as entry per default ?

WORKSFORME with regard to the bug description.
It seems to me that the path you wish to follow here is a sensible one and may
probably be solved by either making checksetup.pl aware of the situation or by
putting a notice into the release notes. Please open a new bug on that.