On 02/10/2010 12:09 PM, Alex Busenius wrote: > Hi Guillaume, > > On 02/10/2010 11:46 AM, Guillaume Lerouge wrote: >> Hi Alex, >> >> On Wed, Feb 10, 2010 at 1:26 AM, Alex Busenius<[email protected]> wrote: >> >>> Hello, >>> >>> How can I specify a security level mentioned in JIRA help >>> (http://jira.xwiki.org/jira/secure/ShowConstantsHelp.jspa#IssueTypes) >>> for a new issue? >>> >> >> I think you need to create the issue, save it and then edit it again since >> the first issue creation screen doesn't display the security level IIRC. >> > > Thank you for the hint, but I still can't change the security level > there. The only thing that comes close to it is the "Viewable By" field, > but the dropdown box only allows me to choose between "All Users", > "Users" or "jira-users". > > Is there any other established way to report security bugs for xwiki? > I'd like to report several XSS/CSRF vulnerabilities and do not want > everybody to see the details before they are fixed.
I'll take a look at the Jira administrative settings to see if I can make the Security field public. -- Sergiu Dumitriu http://purl.org/net/sergiu/ _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
