On 07/29/2009 08:41 PM, Peter Lemenkov wrote:
2009/7/29 Toshio Kuratomi <a.badger(a)gmail.com>:
> Okay, please test this with a package that has people on the initial CC
> list so we've tested precisely the behaviour people are concerned about.
>
> If the initialcclist is not set when a security bug comes in I don't
> think there's a reason we shouldn't auto-approve watchbugzilla in pkgdb.
I think, that we should treat this as an issue - user should be added
to watchlist for sensitive bugs, only if he is in "commits" group
(which means, that he can fix security bugs). If he just in
watchbugzilla, then he shouldn't see such tickets.
AFAIK, this can't be done because there is only one initialcclist field
in bugzilla. So at the bugzilla level, you can either apply the cclist
or not apply the cclist. Can't have both.
-Toshio