Boris Zbarsky [:bzbarsky] Reporter
	Description • 9 years ago

Until I was cced on bug 1203078, I could not add it as a dependency of bug 1205741 (a regression it caused).

This is pretty user-hostile; if someone has gone to the trouble of finding that a restricted bug caused a regression, I see no reason to prevent them from flagging that in Bugzilla.  Especially now that for most people doing triage most security bugs are restricted.

	:glob ✱ Assignee
	Comment 1 • 9 years ago

this is asking for bug 141593 to be reverted - there were security concerns that resulted in the current check.
it's likely the landscape has changed a lot since then, so i think it should be ok to lift this restriction.

i'll raise this as a discussion point in our next meeting.

	:glob ✱ Assignee
	Comment 2 • 9 years ago

we'd probably want to lift this restriction for users with canconfirm/editbugs, not everyone.

	Boris Zbarsky [:bzbarsky] Reporter
	Comment 3 • 9 years ago

Note that for my purposes I don't need to be able to _remove_ dependencies, only add them.  And really only in one direction.

Of course if we had an explicit "X is a regression caused by Y" flag, I'd just need to be able to set that flag... ;)

	:glob ✱ Assignee
	Comment 4 • 9 years ago

we discussed this in the meeting -- we'll do this limited to users with editbugs.

	Dylan Hardison [:dylan] (he/him)
	Comment 6 • 9 years ago

Comment on attachment 8667907 [details] [diff] [review]
1205748_1.patch

Review of attachment 8667907 [details] [diff] [review]:
-----------------------------------------------------------------

r=dylan

	:glob ✱ Assignee
	Comment 7 • 9 years ago

To ssh://gitolite3@git.mozilla.org/webtools/bmo/bugzilla.git
   200cbd8..42270ff  master -> master