Preventing reporter from editing bugs

classic Classic list List threaded Threaded
5 messages Options
Reply | Threaded
Open this post in threaded view
|

Preventing reporter from editing bugs

Brian Peschel
I am using Buigzilla 2.18.  I am trying to setup a bugzilla to help me
track support calls.  I ahve customized quite a bit (really like the
custom submit page matched with the custom comments!  Rocks!).

Anyway, I want my customers to be able to enter issues directly (rather
than email).  I have turned off the Editbugs group from my users which
allows them to still add bugs, add attachments and search for other
bugs.  But, they still can edit anything on bugs they submit (including
things like reassign to other users which I definately do not want).

I didn't see anything in the manual about preventing this.  Searching
throught the news group I see a thread

http://groups-beta.google.com/group/netscape.public.mozilla.webtools/browse_thread/thread/8a25fd31ec2e9d3b/d1f935b9d90c6642?q=submitter+canedit&rnum=1&hl=en#d1f935b9d90c6642

where Gerv specifically states that reporters should be able to
reassign since they might fix it themselves.  This isn't want I want.

Looking through the templates, in
template/en/default/bug/knob.html.tmpl I can see where it is checking
for [% IF bug.user.canedit %] but I can't seem to find where this is
set.

Any help here would be great.  I don't know perl, so if there isn't an
easy way to do it (and I have to hack the perl) assistance would be
greatly appreciated.

Thanks!

_______________________________________________
mozilla-webtools mailing list
[hidden email]
http://mail.mozilla.org/listinfo/mozilla-webtools
Reply | Threaded
Open this post in threaded view
|

Re: Preventing reporter from editing bugs

Brian Peschel
Well, I found in the bugzilla documents
(http://www.bugzilla.org/docs/tip/html/cust-change-permissions.html):

 So, how does one go about changing this function? Well, simple changes
can be made just by removing pieces [snip] If you don't want the
Reporter to have any special rights on bugs they have filed, just
remove the entire section that deals with the Reporter.

So I editied process_bug.cgi and commented out lines 445 - 470 and
reran checksetup.  I confirmed by user is not in the Editbugs group
(but they are in the Confirmbugs group).  The user can still do
anything to the bug.  I assume I missed something....

_______________________________________________
mozilla-webtools mailing list
[hidden email]
http://mail.mozilla.org/listinfo/mozilla-webtools
Reply | Threaded
Open this post in threaded view
|

Re: Preventing reporter from editing bugs

Marc Schumann
Brian,

On 13 May 2005 07:40:31 -0700, Brian P <[hidden email]> wrote:
> So I editied process_bug.cgi and commented out lines 445 - 470 and
> reran checksetup.  I confirmed by user is not in the Editbugs group
> (but they are in the Confirmbugs group).  The user can still do
> anything to the bug.  I assume I missed something....

maybe a succeeding earlier check causes this -- right before the part
you deleted, for example, there are checks for the user trying to edit
to be the QA contact or the owner, who may change anything. For
example, if your reporter can still edit the bug, maybe he's the
owner, too.
Check the whole of the function to find out...

   Kind regards
      Marc

--
http://wurblzap.net/
Bugzilla hosting and professional support

_______________________________________________
mozilla-webtools mailing list
[hidden email]
http://mail.mozilla.org/listinfo/mozilla-webtools
Reply | Threaded
Open this post in threaded view
|

Re: Preventing reporter from editing bugs

Brian Peschel
In reply to this post by Brian Peschel
I assumed the reporter isn't the owner right?  Isn't the 'Assignee' the
owner of the bug?  In the ones I am testing with, the reporter is not
assigned to the bug (nor are they the QA contact which I am not using).

Looking more at what I did, I noticed that the 'edit bug' page when the
user is not the submitter does not show all the options above commit
(ie reassign, duplicate, etc) which is what I want.  When the user is
the reporter, the options are displayed (which is what I don't want).
If they try mark a bug as a duplicate), they get the 'not allowed'
error (because they are not allowed to change the state of the bug).
If they try to reassign, they don't get the error.

So, it appears the process_bug.cgi change does prevent the some of the
changes, but why is the edit bug page sometimes displaying the commit
list and sometimes not displaying the commit list?

_______________________________________________
mozilla-webtools mailing list
[hidden email]
http://mail.mozilla.org/listinfo/mozilla-webtools
Reply | Threaded
Open this post in threaded view
|

Re: Preventing reporter from editing bugs

Brian Peschel
Anyone have any thoughts on this?

_______________________________________________
mozilla-webtools mailing list
[hidden email]
http://mail.mozilla.org/listinfo/mozilla-webtools