On Wed, 2011-06-22 at 14:16 -0500, Deryck Hodge wrote:
> > This would break the contract desired for security bugs: that only
> the
> > security team can see them.
> >
> 
> I agree.  If bug supervisor shouldn't see security bugs, just marking
> it private shouldn't grant additional privileged.  It seems simpler
> and more consistent to say "if it's a security bug, regardless of
> private or public, only the security contact is subscribed." 

I agree. Security prevails.
-- 

__C U R T I S  C.  H O V E Y___________
No matter where you go...there you are.


_______________________________________________
Mailing list: https://launchpad.net/~launchpad-dev
Post to     : launchpad-dev@lists.launchpad.net
Unsubscribe : https://launchpad.net/~launchpad-dev
More help   : https://help.launchpad.net/ListHelp

Reply via email to