414691 - Remove canedit now that we have per-product editbugs

Status: NEW

(Bugzilla :: Administration, task, P5)

Description

[Max Kanat-Alexander]

Now that we have per-product editbugs, it's kind of pointless to have canedit, and it adds a lot of complexity to the code.

Comment 1

[Frédéric Buclin]

I agree about the complexity (both code and UE), but the goal of CANEDIT is to restrict even more who can e.g. comment to a bug. Even without editbugs privs, you can still comment to bugs you can see, and it probably makes sense in some cases to let bugs in some given product to be read-only for most users, and only writable to users being in some group. So I don't think we should remove this feature, even in 4.0.

Comment 2

[Max Kanat-Alexander]

Hrm. I think if you want to restrict who can comment, a better way to do that is to either add a new group or implement bug 372017. Essentially the *only* advantage to canedit is preventing people from commenting in a product, right now, and it's WAY too complex for such a small advantage.

Comment 3

[Frédéric Buclin]

(In reply to comment #2)
> Hrm. I think if you want to restrict who can comment, a better way to do that
> is to either add a new group

Adding a new group won't help.

> advantage to canedit is preventing people from commenting in a product

comment, CC himself, but also prevent the reporter to further alter the bug. We would need an audit here.