Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    primarykey
    data
    text
    <p>You didn't really say which version of Bugzilla you are using, so the URLs are for the latest release, 4.2. However, the same concepts apply to most recent versions. For instance, we use 3.6 and control whether certain users can change certain things in the same ways that I describe below.</p> <p>1) Restricting users who are not in a group from seeing bugs is what Bugzilla's group security does:</p> <p><a href="http://www.bugzilla.org/docs/4.2/en/html/groups.html" rel="nofollow">http://www.bugzilla.org/docs/4.2/en/html/groups.html</a></p> <p>One wrinkle in your case is that group security controls positive access rather than negative access. That is, it allows specifying which groups <strong>can</strong> view bugs in a product rather than groups that <strong>cannot</strong>. To keep members of <code>students</code> from viewing bugs in <code>projectA</code>, you'll need to have a group that can access <code>projectA</code> and devise a way to keep users in <code>students</code> out of that group.</p> <p>Alternatively, you could put some custom code into <code>Bugzilla::User::can_see_bug</code>, <code>Bugzilla::User::visible_bugs</code>, or <code>Bugzilla::Bug::check_is_visible</code> to exert firmer control that users who are in group <code>students</code> can <strong>never</strong> see bugs in <code>projectA</code></p> <p>2) You can exercise a lot of granularity in allowing changes:</p> <p><a href="http://www.bugzilla.org/docs/4.2/en/html/cust-change-permissions.html" rel="nofollow">http://www.bugzilla.org/docs/4.2/en/html/cust-change-permissions.html</a></p> <p>We do something like this. We have a set of users to whom we want to grant read-only access unless we have explicitly allowed read-write access. To do this, we have a group called <code>allspecialusers</code> to which these users belong based on email address. We have another group called <code>approved_specialusers</code> to which some of those users are added manually.</p> <p>So, in our <code>Bugzilla::Bug::check_can_change_field</code>, we have code like:</p> <blockquote> <pre><code>if ($user-&gt;in_group('specialusers') &amp;&amp; !$user-&gt;in_group('approved_specialusers')) { $$PrivilegesRequired = 3; return 0; } </code></pre> </blockquote> <p>You can do what you want by checking if the bug is in product <code>projectB</code> and the user trying to make the change is in group <code>students</code></p>
    singulars
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload