[Tracker-discuss] [issue76] Want just any user to be able to edit nosy list?

Paul Dubois pfdubois at gmail.com
Mon Jan 15 23:15:06 CET 2007


Actually, an anonymous (unsigned-in user) cannot edit an issue. A signed-in
user who did something malicious would leave an audit trail. So it isn't
that big a worry.

On the plus side, I often add someone else to an issue's nosy list when I
add a comment that I want them to see or if I know they should be aware of
the issue. So it's a feature.

On 1/15/07, Erik Forsberg <metatracker at psf.upfronthosting.co.za> wrote:
>
>
> Erik Forsberg added the comment:
>
> "Brett C." <metatracker at psf.upfronthosting.co.za> writes:
>
> > worry of random users coming along and editing the list in a malicious
> way
> > (e.g., adding every person to single issue)?  I can see why the
> developers want
> > to be able to add people to the nosy list, but I don't know if regular
> users
> > need to.
>
> I for sure want to be able to add myself to the nosy list of issues
> that I'm interested in, to get updates when something happens with a
> bug I'm having trouble with in daily work.
>
> This is of course could be implemented with an finer access control
> than the one currently in place - users without developer privileges
> could be limited to add/remove only their own username from the nosy
> list.
>
> \EF
> --
> Erik Forsberg                 http://efod.se
> GPG/PGP Key: 1024D/0BAC89D9
>
> ----------
> title: Restricting what non-submitter, non-developer can edit -> Want just
> any user to be able to edit nosy list?
>
> ______________________________________________________
> Meta Tracker <metatracker at psf.upfronthosting.co.za>
> <http://psf.upfronthosting.co.za/roundup/meta/issue76>
> ______________________________________________________
> _______________________________________________
> Tracker-discuss mailing list
> Tracker-discuss at python.org
> http://mail.python.org/mailman/listinfo/tracker-discuss
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.python.org/pipermail/tracker-discuss/attachments/20070115/d88758fa/attachment.htm 


More information about the Tracker-discuss mailing list