481859 - editbugs, canedit isn't explained clearly in documentation and on editgroups / editproducts

Status: UNCONFIRMED

(Bugzilla :: Documentation, defect)

Description

[bigstijn]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.7) Gecko/2009021910 Firefox/3.0.7
Build Identifier: Bugzilla 3.0

According http://www.bugzilla.org/docs/tip/en/html/products.html
editbugs is:  Any group having editbugs selected allows users who are in this group to edit all fields of bugs in this product.

According http://www.bugzilla.org/docs/tip/en/html/useradmin.html
editbugs: Unless a user has this bit set, they can only edit those bugs for which they are the assignee or the reporter. Even if this option is unchecked, users can still add comments to bugs.

But the full explanation is given in bug 414691, comment 3: not having editbugs still allows you to add comments, CC himself (and others, since bug 458142 comment 10) on any bug, and change every field on bugs where they are assignee or reporter.

For canedit, it should be better to state clearly that canedit is just stronger than editbugs.
Now it's defined in http://www.bugzilla.org/docs/tip/en/html/products.html
as "Only users who are members of all the Canedit groups will be able to edit bugs for this product. This is an additional restriction that enables finer-grained control over products rather than just all-or-nothing access levels."
Which is true, but now that editbugs is there, I would change this into:
"Only users who are members of all the Canedit groups will be able to edit or comment bugs for this product. This is an additional restriction on product level, stronger than the editbugs restriction".

Maybe it would be better to have one place in the documentation where standard groups are explained.

Reproducible: Always

Comment 1

[bigstijn]

(If bug 414691 will be implemented, canedit will disappear.)

Comment 2

[bigstijn]

If documentation is changed, it would be better to modify explanation in editgroups.cgi and editproducts.cgi?action=editgroupcontrols too.

Comment 3

[bigstijn]

Bug 414691 comment 3 gives an extra explanation of canedit:
People not giving canedit is preventing people from commenting in a product, CC himself, but also prevent the reporter to further alter the bug.
=>
"Only users who are members of all the Canedit groups will be able to change fields or comment bugs for this product. This is an additional restriction on product level, stronger than the editbugs restriction".