[Maniphest] [Created] T864: Bug 72436
csteipp created this task. csteipp claimed this task. csteipp added a subscriber: csteipp. csteipp added a project: MediaWiki-Core-Team. csteipp changed the visibility of this Task from Public (No Login Required) to Project: MediaWiki-Core-Team. csteipp changed the edit policy of this Task from All Users to Project: MediaWiki-Core-Team. csteipp changed Security from none to none. TASK DESCRIPTION TASK DETAIL https://phabricator.wikimedia.org/T864 REPLY HANDLER ACTIONS Reply to comment or attach files, or !close, !claim, !unsubscribe or !assign username. To: csteipp Cc: csteipp, wikibugs-l ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Maniphest] [Created] T837: Bug 72436
csteipp created this task. csteipp added a subscriber: csteipp. csteipp changed the visibility of this Task from Public (No Login Required) to Project: MediaWiki-Core-Team. csteipp changed the edit policy of this Task from All Users to Project: MediaWiki-Core-Team. csteipp changed Security from none to none. TASK DESCRIPTION High impact security bug TASK DETAIL https://phabricator.wikimedia.org/T837 REPLY HANDLER ACTIONS Reply to comment or attach files, or !close, !claim, !unsubscribe or !assign username. To: csteipp Cc: wikibugs-l, csteipp ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Maniphest] [Updated] T837: Bug 72436
csteipp added a project: MediaWiki-Core-Team. csteipp changed the visibility of this Task from Project: MediaWiki-Core-Team to Project: security. csteipp changed the edit policy of this Task from Project: MediaWiki-Core-Team to Project: security. TASK DETAIL https://phabricator.wikimedia.org/T837 REPLY HANDLER ACTIONS Reply to comment or attach files, or !close, !claim, !unsubscribe or !assign username. To: csteipp Cc: wikibugs-l, csteipp ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Maniphest] [Changed Project Column] T837: Bug 72436
csteipp moved this task to In Dev on the MediaWiki-Core-Team workboard. TASK DETAIL https://phabricator.wikimedia.org/T837 REPLY HANDLER ACTIONS Reply to comment or attach files, or !close, !claim, !unsubscribe or !assign username. To: csteipp Cc: wikibugs-l, csteipp ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Maniphest] [Created] T737: bug 72166
csteipp created this task. csteipp claimed this task. csteipp added a subscriber: csteipp. csteipp added a project: MediaWiki-Core-Team. csteipp changed the visibility of this Task from Public (No Login Required) to Project: MediaWiki-Core-Team. csteipp changed the edit policy of this Task from All Users to Project: MediaWiki-Core-Team. csteipp changed Security from none to Private Issue. Restricted Application changed the visibility of this Task from Project: MediaWiki-Core-Team to Project: security. Restricted Application changed the edit policy of this Task from Project: MediaWiki-Core-Team to Project: security. Restricted Application edited projects, added security; removed MediaWiki-Core-Team. TASK DESCRIPTION This is a security bug TASK DETAIL https://phabricator.wikimedia.org/T737 REPLY HANDLER ACTIONS Reply to comment or attach files, or !close, !claim, !unsubscribe or !assign username. To: csteipp Cc: wikibugs-l, csteipp ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Maniphest] [Commented On] T518: Users CCed in private tasks should be able to access them
csteipp added a comment. ! In T518#9002, @Qgil wrote: # CCed users... obtain view-only permissions (they can't edit, can't comment, can't CC other users)? Or should they be added to the group in the tasks they are CCed, just like Assigned To and Authors? For mediawiki security bugs, I'd prefer the CC users get edit rights, but I can live with just view and talking to the people oob. It's painful, and we loose institutional knowledge whenever we resort to email to talk about the bug while they can't comment, but we can make it work. TASK DETAIL https://phabricator.wikimedia.org/T518 REPLY HANDLER ACTIONS Reply to comment or attach files, or !close, !claim, !unsubscribe or !assign username. To: Qgil, csteipp Cc: wikibugs-l, Qgil, mmodell, chasemp, Aklapper, Dzahn, csteipp, greg ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Maniphest] [Changed CC] T518: Users CCed in private tasks should be able to access them
csteipp added a subscriber: csteipp. csteipp added a comment. Questions: * It seems that we are indeed CCing users to private reports in Bugzilla, giving them access to read and comment only in the reports where they are CCed. Are we interested in keeping this functionality in Phabricator? Yes! This really is critical to my workflow. I can't manage fixing security bugs without this feature. TASK DETAIL https://phabricator.wikimedia.org/T518 REPLY HANDLER ACTIONS Reply to comment or attach files, or !close, !claim, !unsubscribe or !assign username. To: Qgil, csteipp Cc: wikibugs-l, Qgil, mmodell, chasemp, Aklapper, Dzahn, csteipp, jeremyb ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Maniphest] [Commented On] T518: Users CCed in private tasks should be able to access them
csteipp added a comment. Yeah, after talking to Chase more, the current functionality will work, it's just extra work. Ideally, users who can see/edit the bug (i.e., like users cc'ed on bugzilla bugs) should be able to pull in other, unprivileged users to work on a security bug without a person from the security group being involved. As it is, they'll just have to ping someone who can add the person. TASK DETAIL https://phabricator.wikimedia.org/T518 REPLY HANDLER ACTIONS Reply to comment or attach files, or !close, !claim, !unsubscribe or !assign username. To: Qgil, csteipp Cc: wikibugs-l, Qgil, mmodell, chasemp, Aklapper, Dzahn, csteipp, greg, jeremyb ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l