869162 - Lost infra/moco security checkboxes on submission

Status: RESOLVED FIXED

(bugzilla.mozilla.org :: General, defect)

Description

[Greg Cox [:gcox]]

https://bugzilla.mozilla.org/enter_bug.cgi?product=mozilla.org

Last week (week of 2013-04-29), just above the "Many users could be harmed" checkbox, I had access to infra-only and moco-only.

Those seem to be gone now on submission, but available after the bug goes in.  And NOBODY likes doing the two-step. :)

Comment 1

[David Lawrence [:dkl]]

Committing to: bzr+ssh://[e-mail]/bmo/4.2             
modified extensions/BMO/template/en/default/bug/create/create-mozpr.html.tmpl
modified template/en/default/bug/create/create.html.tmpl                                      
modified extensions/BMO/lib/Data.pm
Committed revision 8779.

Comment 2

[Greg Cox [:gcox]]

After the push, I see the 'infra' group, but not 'mozilla-corporation-confidential', which makes me think something else is amiss.

Comment 3

[David Lawrence [:dkl]]

(In reply to Greg Cox [:gcox] from comment #2)
> After the push, I see the 'infra' group, but not
> 'mozilla-corporation-confidential', which makes me think something else is
> amiss.

The 'mozilla-corporation-confidential' group is the default security group for the product so it will be used if the "Many users could be harmed by this security problem..." checkbox is checked.

I will file a new bug to add the group name in parens to that description to make it more obvious.

dkl

Comment 4

[Greg Cox [:gcox]]

Hm.  That used to be an available option.  i.e., things were public by default, moco or infra-only or security-problem by checkbox.

Just noting.. I'll wait to see what happens.

Comment 5

[David Lawrence [:dkl]]

(In reply to Greg Cox [:gcox] from comment #4)
> Hm.  That used to be an available option.  i.e., things were public by
> default, moco or infra-only or security-problem by checkbox.
> 
> Just noting.. I'll wait to see what happens.

It still is public by default unless some manually checks the box making it private if they feel it should be. This just means that all can see that even if they are not in the group itself and so have the ability to make a bug private if they feel it should not be publicly viewable. Each product has this ability with it's own default secure group or core-security being the default if one is not set specifically.

dkl