[Tracker-discuss] [issue76] Want just any user to be able to edit nosy list?
pfdubois at gmail.com
Mon Jan 15 23:15:06 CET 2007
Actually, an anonymous (unsigned-in user) cannot edit an issue. A signed-in
user who did something malicious would leave an audit trail. So it isn't
that big a worry.
On the plus side, I often add someone else to an issue's nosy list when I
add a comment that I want them to see or if I know they should be aware of
the issue. So it's a feature.
On 1/15/07, Erik Forsberg <metatracker at psf.upfronthosting.co.za> wrote:
> Erik Forsberg added the comment:
> "Brett C." <metatracker at psf.upfronthosting.co.za> writes:
> > worry of random users coming along and editing the list in a malicious
> > (e.g., adding every person to single issue)? I can see why the
> developers want
> > to be able to add people to the nosy list, but I don't know if regular
> > need to.
> I for sure want to be able to add myself to the nosy list of issues
> that I'm interested in, to get updates when something happens with a
> bug I'm having trouble with in daily work.
> This is of course could be implemented with an finer access control
> than the one currently in place - users without developer privileges
> could be limited to add/remove only their own username from the nosy
> Erik Forsberg http://efod.se
> GPG/PGP Key: 1024D/0BAC89D9
> title: Restricting what non-submitter, non-developer can edit -> Want just
> any user to be able to edit nosy list?
> Meta Tracker <metatracker at psf.upfronthosting.co.za>
> Tracker-discuss mailing list
> Tracker-discuss at python.org
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Tracker-discuss