Closed Bug 684255 Opened 13 years ago Closed 13 years ago

Auto-vouch any profiles with @mozilla.com, @mozillafoundation.org or @mozilla.org email addresses

Categories

(Participation Infrastructure :: Phonebook, defect, P2)

Product:
Participation Infrastructure
Component:
Phonebook
Platform:
x86
macOS
Type:
defect

Tracking

(Not tracked)

Status:
VERIFIED FIXED

People

(Reporter: davidwboswell, Unassigned)

References

Details

(Whiteboard: [1.0.1]) 

As part of the effort to seed the phonebook with people who have already been vetted as Mozillians through other channels, we should auto-vouch anyone with @mozilla.com, @mozillafoundation.org or @mozilla.org email addresses.

Not sure if I'm missing any addresses here, like @mozilla-europe.org or anything, so please feel free to suggest other options.
It would be great if we could do this for 1.0, but I don't think it's realistic. Still, it's a good idea. Add any other addresses to this bug and we'll do this in 1.1.
Target Milestone: --- → 1.1
Commit pushed to https://github.com/mozilla/mozillians

https://github.com/mozilla/mozillians/commit/df987074eddfd5a33265c4a4ed3121c8d456a63f
Fix security hole in auto-vouching domains

Thanks to @evilpie for catching this one! Secures the code
committed in bug 684255.
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → FIXED
Verified I was being auto-vouched after creation of the profile.
Status: RESOLVED → VERIFIED
Reopening.

It looks like the auto-vouching is being applied too broadly and is catching anyone with 'mozilla' anywhere in their email address (for example see Paul Booker's email address used in his profile).

The auto-vouch should only apply to @mozilla.com, @mozillafoundation.org or @mozilla.org addresses.  Any other uses of 'mozilla' shouldn't trigger auto-vouching.

So mozilla@foo.org and foo@mozilla-rules.org shouldn't get auto-vouched.
Status: VERIFIED → REOPENED
Resolution: FIXED → ---
Priority: -- → P2
Whiteboard: [1.0.1]
Based on discussion in IRC I realize I was jumping to a conclusion here.  There may be other reasons why no voucher is being listed on Paul's profile.

Closing this and will open a new bug.
Status: REOPENED → RESOLVED
Closed: 13 years ago → 13 years ago
Resolution: --- → FIXED
For reference, the new bug is bug 690792
Re-verifying.
Status: RESOLVED → VERIFIED
Component: mozillians.org → Phonebook
Product: Websites → Community Tools
QA Contact: mozillians-org → phonebook
Target Milestone: 1.1 → ---
Version: unspecified → other
You need to log in before you can comment on or make changes to this bug.