Hi,

On 11.11.2010 11:44, Frank Schönheit wrote:
Hi Stefan,

The framework allows to restrict the permission to add attachments to an
issues. At the moment this is allowed to all registered and logged in
user. We could restrict this to all users that have a role in the QA
project (plus/including the canconfirm role).

This would probably mean that users which submit a bug, but have no
other privileges (in particular: are not member of the "canconfirm"
group), are unable to add attachments to the issues they just submitted,
right?

(almost) correct.
I don't think it needs "canconfirm" privileges but any role (including Observer) in the project mentioned in the URL.
So to attach a file to bug
http://qa.openoffice.org/issues/show_bug.cgi?id=100000
you would need a role in the qa project.

As much as this spam annoys me, I am not sure we should go that way.

I suppose any possible solution depends on how much support from
collab.net we get for this ...
(disabling HTML attachments? Adding a captcha? Preventing attachments
from unprivileged users to bugs other than the ones they submitted
themselves?)

Switching to ProjectTracker, Jira, ...

Seriously I was looking for a short term solution.

Greetings
Stefan

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to