[Maniphest] [Created] T864: Bug 72436

2014-10-24 Thread csteipp
csteipp created this task.
csteipp claimed this task.
csteipp added a subscriber: csteipp.
csteipp added a project: MediaWiki-Core-Team.
csteipp changed the visibility of this Task from Public (No Login Required) 
to Project: MediaWiki-Core-Team.
csteipp changed the edit policy of this Task from All Users to Project: 
MediaWiki-Core-Team.
csteipp changed Security from none to none.

TASK DESCRIPTION


TASK DETAIL
  https://phabricator.wikimedia.org/T864

REPLY HANDLER ACTIONS
  Reply to comment or attach files, or !close, !claim, !unsubscribe or !assign 
username.

To: csteipp
Cc: csteipp, wikibugs-l



___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Maniphest] [Created] T837: Bug 72436

2014-10-23 Thread csteipp
csteipp created this task.
csteipp added a subscriber: csteipp.
csteipp changed the visibility of this Task from Public (No Login Required) 
to Project: MediaWiki-Core-Team.
csteipp changed the edit policy of this Task from All Users to Project: 
MediaWiki-Core-Team.
csteipp changed Security from none to none.

TASK DESCRIPTION
  High impact security bug

TASK DETAIL
  https://phabricator.wikimedia.org/T837

REPLY HANDLER ACTIONS
  Reply to comment or attach files, or !close, !claim, !unsubscribe or !assign 
username.

To: csteipp
Cc: wikibugs-l, csteipp



___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Maniphest] [Updated] T837: Bug 72436

2014-10-23 Thread csteipp
csteipp added a project: MediaWiki-Core-Team.
csteipp changed the visibility of this Task from Project: MediaWiki-Core-Team 
to Project: security.
csteipp changed the edit policy of this Task from Project: 
MediaWiki-Core-Team to Project: security.

TASK DETAIL
  https://phabricator.wikimedia.org/T837

REPLY HANDLER ACTIONS
  Reply to comment or attach files, or !close, !claim, !unsubscribe or !assign 
username.

To: csteipp
Cc: wikibugs-l, csteipp



___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Maniphest] [Changed Project Column] T837: Bug 72436

2014-10-23 Thread csteipp
csteipp moved this task to In Dev on the MediaWiki-Core-Team workboard.

TASK DETAIL
  https://phabricator.wikimedia.org/T837

REPLY HANDLER ACTIONS
  Reply to comment or attach files, or !close, !claim, !unsubscribe or !assign 
username.

To: csteipp
Cc: wikibugs-l, csteipp



___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Maniphest] [Created] T737: bug 72166

2014-10-20 Thread csteipp
csteipp created this task.
csteipp claimed this task.
csteipp added a subscriber: csteipp.
csteipp added a project: MediaWiki-Core-Team.
csteipp changed the visibility of this Task from Public (No Login Required) 
to Project: MediaWiki-Core-Team.
csteipp changed the edit policy of this Task from All Users to Project: 
MediaWiki-Core-Team.
csteipp changed Security from none to Private Issue.
Restricted Application changed the visibility of this Task from Project: 
MediaWiki-Core-Team to Project: security.
Restricted Application changed the edit policy of this Task from Project: 
MediaWiki-Core-Team to Project: security.
Restricted Application edited projects, added security; removed 
MediaWiki-Core-Team.

TASK DESCRIPTION
  This is a security bug

TASK DETAIL
  https://phabricator.wikimedia.org/T737

REPLY HANDLER ACTIONS
  Reply to comment or attach files, or !close, !claim, !unsubscribe or !assign 
username.

To: csteipp
Cc: wikibugs-l, csteipp



___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Maniphest] [Commented On] T518: Users CCed in private tasks should be able to access them

2014-10-07 Thread csteipp
csteipp added a comment.

! In T518#9002, @Qgil wrote:
 # CCed users... obtain view-only permissions (they can't edit, can't comment, 
 can't CC other users)? Or should they be added to the group in the tasks they 
 are CCed, just like Assigned To and Authors?

For mediawiki security bugs, I'd prefer the CC users get edit rights, but I can 
live with just view and talking to the people oob. It's painful, and we loose 
institutional knowledge whenever we resort to email to talk about the bug while 
they can't comment, but we can make it work.

TASK DETAIL
  https://phabricator.wikimedia.org/T518

REPLY HANDLER ACTIONS
  Reply to comment or attach files, or !close, !claim, !unsubscribe or !assign 
username.

To: Qgil, csteipp
Cc: wikibugs-l, Qgil, mmodell, chasemp, Aklapper, Dzahn, csteipp, greg



___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Maniphest] [Changed CC] T518: Users CCed in private tasks should be able to access them

2014-10-06 Thread csteipp
csteipp added a subscriber: csteipp.
csteipp added a comment.

 Questions:
 
 * It seems that we are indeed CCing users to private reports in Bugzilla, 
 giving them access to read and comment only in the reports where they are 
 CCed. Are we interested in keeping this functionality in Phabricator?

Yes! This really is critical to my workflow. I can't manage fixing security 
bugs without this feature.

TASK DETAIL
  https://phabricator.wikimedia.org/T518

REPLY HANDLER ACTIONS
  Reply to comment or attach files, or !close, !claim, !unsubscribe or !assign 
username.

To: Qgil, csteipp
Cc: wikibugs-l, Qgil, mmodell, chasemp, Aklapper, Dzahn, csteipp, jeremyb



___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Maniphest] [Commented On] T518: Users CCed in private tasks should be able to access them

2014-10-06 Thread csteipp
csteipp added a comment.

Yeah, after talking to Chase more, the current functionality will work, it's 
just extra work.

Ideally, users who can see/edit the bug (i.e., like users cc'ed on bugzilla 
bugs) should be able to pull in other, unprivileged users to work on a security 
bug without a person from the security group being involved. As it is, they'll 
just have to ping someone who can add the person.

TASK DETAIL
  https://phabricator.wikimedia.org/T518

REPLY HANDLER ACTIONS
  Reply to comment or attach files, or !close, !claim, !unsubscribe or !assign 
username.

To: Qgil, csteipp
Cc: wikibugs-l, Qgil, mmodell, chasemp, Aklapper, Dzahn, csteipp, greg, jeremyb



___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l