This is the mail archive of the
overseers@sourceware.org
mailing list for the Sourceware project.
Re: GCC Bugzilla account creation configuration
Le 14. 09. 17 à 14:34, Frank Ch. Eigler a écrit :
>> [...] It was said that it shouldn't be hard to change Bugzilla
>> locally so editusers can't change permission bits on users without
>> having changing those bits explicitly enabled. [...]
>
> Earlier testing indicated this has not been done, making the current
> arrangement unacceptably dangerous.
I don't know who said it shouldn't be hard to patch Bugzilla, but it
certainly wasn't me. I said it should be doable, which doesn't
necessarily means "easy". I didn't look at it yet.
David Edelsohn reaction was that "everyone is alert that we will be
watching". This sounded more like "no worry, we will be watching what
those power users do" than "please restrict power users privileges".
If the consensus is that we want to restrict privileges for those users,
then I will work on it. Depending on how invasive changes would be, I
could add a new "addusers" bit instead.
Frédéric