mmodell added a comment.

@chasemp: If we merge the patch from T475 ( 
https://gerrit.wikimedia.org/r/#/c/163753/ ) then this task doesn't make as 
much sense.

The patch for T475 sets the policy to "members of projects the task is part of" 
and the security plugin needs to ensure that a task isn't added to an insecure 
project thus revealing it to people who shouldn't be able to access the secure 
task.

In general I think it only makes sense to have "tag" type projects in addition 
to the secure "group" project.

...anyway it's not entirely straightforward and I'm still not sure what's best.

TASK DETAIL
  https://phabricator.wikimedia.org/T716

REPLY HANDLER ACTIONS
  Reply to comment or attach files, or !close, !claim, !unsubscribe or !assign 
<username>.

To: mmodell
Cc: wikibugs-l, chasemp, Qgil



_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to