On 02/10/2010 12:17 PM, Vincent Massol wrote: > Hi Alex, > > On Feb 10, 2010, at 12:09 PM, Alex Busenius wrote: > >> Hi Guillaume, >> >> On 02/10/2010 11:46 AM, Guillaume Lerouge wrote: >>> Hi Alex, >>> >>> On Wed, Feb 10, 2010 at 1:26 AM, Alex Busenius<[email protected]> wrote: >>> >>>> Hello, >>>> >>>> How can I specify a security level mentioned in JIRA help >>>> (http://jira.xwiki.org/jira/secure/ShowConstantsHelp.jspa#IssueTypes) >>>> for a new issue? >>>> >>> >>> I think you need to create the issue, save it and then edit it again since >>> the first issue creation screen doesn't display the security level IIRC. >>> >> >> Thank you for the hint, but I still can't change the security level >> there. The only thing that comes close to it is the "Viewable By" field, >> but the dropdown box only allows me to choose between "All Users", >> "Users" or "jira-users". >> >> Is there any other established way to report security bugs for xwiki? >> I'd like to report several XSS/CSRF vulnerabilities and do not want >> everybody to see the details before they are fixed. > > Thanks for that. I've just given you the right on jira so all should be ok > now. Can you verify?
Vincent, you didn't do it right, you granted him the right to view confidential issues, not to change the security setting. I changed the permission so that the reporter can mark issues as confidential. -- Sergiu Dumitriu http://purl.org/net/sergiu/ _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
