From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mx1.redhat.com (mx1.redhat.com [209.132.183.28]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ml01.01.org (Postfix) with ESMTPS id A44E31A1E1D for ; Tue, 2 Aug 2016 12:34:07 -0700 (PDT) Received: from int-mx13.intmail.prod.int.phx2.redhat.com (int-mx13.intmail.prod.int.phx2.redhat.com [10.5.11.26]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1.redhat.com (Postfix) with ESMTPS id 1E3323919D0; Tue, 2 Aug 2016 19:34:07 +0000 (UTC) Received: from lacos-laptop-7.usersys.redhat.com (ovpn-116-83.phx2.redhat.com [10.3.116.83]) by int-mx13.intmail.prod.int.phx2.redhat.com (8.14.4/8.14.4) with ESMTP id u72JY50R030274; Tue, 2 Aug 2016 15:34:06 -0400 To: "Kinney, Michael D" , Michael Zimmermann References: <79672ab9-15b9-a44e-f37a-313093489d9b@redhat.com> <52fe8d21-7c6c-3b48-e336-30042a6fae8f@redhat.com> <15ba9a6e-c793-4e22-3f38-cc95c34b0ff0@redhat.com> Cc: edk2-devel-01 From: Laszlo Ersek Message-ID: Date: Tue, 2 Aug 2016 21:34:05 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.2.0 MIME-Version: 1.0 In-Reply-To: X-Scanned-By: MIMEDefang 2.68 on 10.5.11.26 X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.5.16 (mx1.redhat.com [10.5.110.29]); Tue, 02 Aug 2016 19:34:07 +0000 (UTC) Subject: Re: Tianocore Bugzilla Server is now live X-BeenThere: edk2-devel@lists.01.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: EDK II Development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 02 Aug 2016 19:34:07 -0000 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit On 08/02/16 21:10, Kinney, Michael D wrote: > Michael, > > I am open to suggestions on this topic. > > If there is a strong opinion that we need to protect specific fields > from being modified, then we can look into updating the configuration. > > I think with Bugzilla change history and edk2-bugs mailing list, we can > all see the changes to any issue, so even if someone does do an > incorrect edit, I think we can put it back. Does "editbugs" include changing the product from "Tianocore Security Issues" to something else, possibly exposing the security issue to the world? Hm... It probably doesn't matter. If a security issue can be looked at (which is a pre-requisite for the product field to be changed) by anyone in the first place, then they can expose the contents to the world in other ways too. :) So I think trusting all registered accounts with "editbugs" is a good starting point too. Thanks Laszlo > *From:*Michael Zimmermann [mailto:sigmaepsilon92@gmail.com] > *Sent:* Tuesday, August 2, 2016 11:57 AM > *To:* Laszlo Ersek > *Cc:* Kinney, Michael D ; edk2-devel-01 > > *Subject:* Re: [edk2] Tianocore Bugzilla Server is now live > > > > Is it just my account or does everybody have the permission > "editbugs Can edit all bug fields"? > > > > It sounds like this is something only moderators should be able to do. > > > > Thanks > > Michael > > > > On Thu, Jul 21, 2016 at 8:43 PM, Laszlo Ersek > wrote: > > On 07/21/16 20:07, Kinney, Michael D wrote: > > Laszlo, > > > > Try again...it was disabled for a short period of time. > > Yes, it's working now. > > I'll let you know when I'm done with the clipboard "wizardry" and the > occasional reformatting :) > > Thanks! > Laszlo > > >> -----Original Message----- > >> From: edk2-devel [mailto:edk2-devel-bounces@lists.01.org > ] On Behalf Of Laszlo Ersek > >> Sent: Thursday, July 21, 2016 10:33 AM > >> To: Kinney, Michael D > > >> Cc: edk2-devel-01 > > >> Subject: Re: [edk2] Tianocore Bugzilla Server is now live > >> > >> On 07/21/16 19:05, Kinney, Michael D wrote: > >>> Laszlo, > >>> > >>> Yes. We can hold off disabling GitHub. Let us know when you are ready. > >> > >> Thank you! However, github is rejecting my new comments in the browser > >> tabs that I have open already, and it rejects my fresh requests for > >> issue URLs. > >> > >> Thanks, > >> Laszlo > > _______________________________________________ > edk2-devel mailing list > edk2-devel@lists.01.org > https://lists.01.org/mailman/listinfo/edk2-devel > > >