Bug 457707 - bugzilla doesn't allow users who are not related to bugs to change external bug references
Summary: bugzilla doesn't allow users who are not related to bugs to change external b...
Keywords:
Status: CLOSED NEXTRELEASE
Alias: None
Product: Bugzilla
Classification: Community
Component: Creating/Changing Bugs
Version: 3.2
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Noura El hawary
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2008-08-04 04:27 UTC by Noura El hawary
Modified: 2025-10-16 23:18 UTC (History)
1 user (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2008-08-04 16:22:35 UTC
Embargoed:


Attachments (Terms of Use)
v1 patch to allow all logged in users to update external bugs on any bug (2.49 KB, patch)
2008-08-04 04:32 UTC, Noura El hawary
dkl: review+
Details | Diff

Description Noura El hawary 2008-08-04 04:27:34 UTC
reported by: Christian Krause <chkr>

Hi,

since updating bugzilla.redhat.com to a new bugzilla version I cannot 
create external bug references to bugs not created by myself anymore.
I've used this feature quite often to add links to upstream bug reports. 
Please can the permissions be adjusted so that the old behavior is restored?

This would be great. Thanks!

Best regards,
Christian

Comment 1 Noura El hawary 2008-08-04 04:32:20 UTC
Created attachment 313302 [details]
v1 patch to allow all logged in users to update external bugs on any bug

Bugzilla 2.18 used to allow all logged in users to update external bug links for any bug, where as in 3.2 we only allow that for users who are related to the bugs. 

Attached is a patch to change the restriction on updating a bug from being related to the bug to only being logged in to bugzilla.

Please review when you can.

Thanks,
Noura

Comment 2 Noura El hawary 2008-08-04 05:56:54 UTC
please note that the patch has been applied to bz-web2 if you would like to test it there.

Comment 3 David Lawrence 2008-08-04 15:58:31 UTC
Comment on attachment 313302 [details]
v1 patch to allow all logged in users to update external bugs on any bug

Although I disagree that this change should be allowed by anyone who is not related to the bug or in the 'editbugs' groups, I suppose we need to allow it if this is old 2.18 behaviour. We should leave this bug though to allow further discussion about this. Since external references IMO are a basic bug attribute it should fall under the same restrictions as all othe bug attributes.

Dave

Comment 4 Noura El hawary 2008-08-04 16:22:35 UTC
thanks for the review Dave, committed to cvs


Note You need to log in before you can comment on or make changes to this bug.