494155 - editing yourself shouldn't show less information than viewing your user permissions

Status: RESOLVED WONTFIX

Description

[timeless]

steps:
0. view your account permissions,
https://bugzilla.mozilla.org/userprefs.cgi?tab=permissions

Permissions
You have the following permission bits set on your account:
bugzilla-security 	Security-Sensitive Bugzilla Bug
bugzilla-security-team 	Bugzilla Security Team
bz_canusewhineatothers 	Can configure whine reports for other users
bz_canusewhines 	User can configure whine reports for self
canconfirm 	Can confirm a bug.
client-services-security 	Security-Sensitive Client Services Bug
core-security 	Security-Sensitive Core Bug
editbugs 	Can edit all aspects of any bug.
editclassifications 	Can create, destroy, and edit classifications.
editcomponents 	Can create, destroy, and edit components.
editkeywords 	Can create, destroy, and edit keywords.
security-group 	Mozilla Security Group member
webtools-security 	Security-Sensitive Webtools Bug
webtools-security-team 	Webtools Security Team

And you can turn on or off the following bits for other users:
bz_canusewhines 	User can configure whine reports for self
canconfirm 	Can confirm a bug.
editbugs 	Can edit all aspects of any bug.

1. edit your user account, for me, that's: https://bugzilla.mozilla.org/editusers.cgi?action=edit&userid=15223

actual results:
Bugzilla@Mozilla – Edit user timeless <[e-mail]>

Login name: 	[e-mail]
Real name: 	timeless
Group access: 	
User is a member of these groups
	bz_canusewhines: User can configure whine reports for self
	canconfirm: Can confirm a bug.
	editbugs: Can edit all aspects of any bug.
Product responsibilities: 	none

or View Account History

notes:
if I was an admin, i'd be able to see that [e-mail] has inherited certain bits by looking at editusers for this account.

expected results:

the label says "User is a member of these groups"

A. I expect the list to list all groups to which the account is a member (that information is clearly not a secret as the user is given that information in account permissions).
B. For all groups the user can't turn off, the checkboxes should be disabled
C. For all groups that the user is in by inheritance, the brackets should be present just like they would be in the normal editor.

Comment 1

[Frédéric Buclin]

This is a minor thing which doesn't worth to be fixed. Most users cannot access editusers.cgi, and those who can almost never edit their own privs. Adding a whole new UI and logic for this single case is worthless.