703622 - New group for amo-editors

Status: RESOLVED FIXED

(bugzilla.mozilla.org :: Administration, task)

Description

[Andrew Williamson [:eviljeff]]

We get security bugs logged at [https://bugzilla.mozilla.org/buglist.cgi?product=addons.mozilla.org&component=Add-on Security] and we'd like a security group just for AMO Editors that would be assigned to it. 

We can't use the MoCo group or similar as most editors are volunteers rather than staff. Please advise if you need the list of users who need to be in it or if I'm going to be able to add them myself.

Comment 1

[David Lawrence [:dkl]]

Done. You can add the users at https://bugzilla.mozilla.org/editusers.cgi.

dkl

Comment 2

[David Lawrence [:dkl]]

Reed mentioned that we should structure this differently so reopening.

Will create a group: addons-security

Will then make amo-editors part of that group as well as the other security groups
such as  client-services-security-team, security-group, and s-r-t.

The addons-security group will be the one visible in the bug reports themselves.

dkl

Comment 3

[Andrew Williamson [:eviljeff]]

Thanks, I've started adding the editors to the amo-editors group.

Do we need the addons-security group listed as an option on new bugs or is it implicit for that component now?

Comment 4

[David Lawrence [:dkl]]

(In reply to Andrew Williamson [:eviljeff] from comment #3)
> Thanks, I've started adding the editors to the amo-editors group.
> 
> Do we need the addons-security group listed as an option on new bugs or is
> it implicit for that component now?

It is now listed as an option on new bugs to select that group for the whole of the addons.mozilla.org product. Currently it is not possible to make it only for specific components. I will also check in changes to make the group always fileable even for 
people not in the group.

Is there an email address that you would like to have automatically added to the Cc list of the bug when a bug is filed for that group? We currently do for other security groups similar.

dkl

Comment 5

[Andrew Williamson [:eviljeff]]

Can we have [e-mail]

thanks!

Comment 6

[David Lawrence [:dkl]]

Ok. Changes made to the code and should show up in the next code push sometime this week.

Committing to: bzr+ssh://[e-mail]/bmo/4.0
modified extensions/BMO/lib/Data.pm
Committed revision 7952.

dkl