I am using Buigzilla 2.18. I am trying to setup a bugzilla to help me
track support calls. I ahve customized quite a bit (really like the
custom submit page matched with the custom comments! Rocks!).
Anyway, I want my customers to be able to enter issues directly (rather
than email). I have turned off the Editbugs group from my users which
allows them to still add bugs, add attachments and search for other
bugs. But, they still can edit anything on bugs they submit (including
things like reassign to other users which I definately do not want).
I didn't see anything in the manual about preventing this. Searching
throught the news group I see a thread
So, how does one go about changing this function? Well, simple changes
can be made just by removing pieces [snip] If you don't want the
Reporter to have any special rights on bugs they have filed, just
remove the entire section that deals with the Reporter.
So I editied process_bug.cgi and commented out lines 445 - 470 and
reran checksetup. I confirmed by user is not in the Editbugs group
(but they are in the Confirmbugs group). The user can still do
anything to the bug. I assume I missed something....
On 13 May 2005 07:40:31 -0700, Brian P <[hidden email]> wrote:
> So I editied process_bug.cgi and commented out lines 445 - 470 and
> reran checksetup. I confirmed by user is not in the Editbugs group
> (but they are in the Confirmbugs group). The user can still do
> anything to the bug. I assume I missed something....
maybe a succeeding earlier check causes this -- right before the part
you deleted, for example, there are checks for the user trying to edit
to be the QA contact or the owner, who may change anything. For
example, if your reporter can still edit the bug, maybe he's the
Check the whole of the function to find out...
I assumed the reporter isn't the owner right? Isn't the 'Assignee' the
owner of the bug? In the ones I am testing with, the reporter is not
assigned to the bug (nor are they the QA contact which I am not using).
Looking more at what I did, I noticed that the 'edit bug' page when the
user is not the submitter does not show all the options above commit
(ie reassign, duplicate, etc) which is what I want. When the user is
the reporter, the options are displayed (which is what I don't want).
If they try mark a bug as a duplicate), they get the 'not allowed'
error (because they are not allowed to change the state of the bug).
If they try to reassign, they don't get the error.
So, it appears the process_bug.cgi change does prevent the some of the
changes, but why is the edit bug page sometimes displaying the commit
list and sometimes not displaying the commit list?