Bug 9718 - Make the test plans/runs readable by all
Summary: Make the test plans/runs readable by all
Status: VERIFIED FIXED
Alias: None
Product: Bugzilla
Classification: Infrastructure
Component: bugzilla (show other bugs)
Version: unspecified
Hardware: x86 Multiple
: Undecided normal
Target Milestone: ---
Assignee: Michael Halstead
QA Contact:
URL:
Whiteboard:
Depends on:
Blocks:
 
Reported: 2016-06-06 15:46 UTC by brian avery
Modified: 2016-06-07 15:15 UTC (History)
4 users (show)

See Also:
OS type for building Yocto: ---
Type of Regression: ---
Verified:
Documentation change: No (bug/feature does not impact docs)

Attachments
permissions set to readable by all. (219.30 KB, image/png)
2016-06-06 15:46 UTC, brian avery 		no flags Details
permissions NOT set to readable by all. (197.32 KB, image/png)
2016-06-06 15:47 UTC, brian avery 		no flags Details
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description brian avery 2016-06-06 15:46:10 UTC 
Created attachment 3216 [details]
permissions set to readable by all.

Currently most of our test runs are not readable by people outside the tester group.

To fix this we need to 
1) add a default for new test plans test plan that sets user expression '.*' and read box selected.
2) go through the existing test plans and set user expression '.*' and read box selected.

Note, the permissions for the test RUNS are derived from the 'ANDing' of the permissions of the (sometimes multiple) test PLANS they are tied to.
Comment 1 brian avery 2016-06-06 15:47:24 UTC 
Created attachment 3217 [details]
permissions NOT set to readable by all.
Comment 2 Michael Halstead 2016-06-06 19:31:04 UTC 
All test plans are now world readable. I updated the database directly to save time.

The following test plans are also world writable. Shall I remove global write access from plans not labeled sandbox? Is there potential for abuse with global write access?

ADT Docs: Community Sandbox
ADT: Community Sandbox
Anjuta Plugin: Community Sandbox
Autobuilder: Community Sandbox
Automated Build Testing: Community Sandbox
Automated Runtime Testing: Community Sandbox
BitBake: Community Sandbox
BSP Docs: Community Sandbox
BSP/QEMU: Community Sandbox
Bugzilla: Community Sandbox
Build Appliance: Community Sandbox
Community
Cross-prelink: Community Sandbox
Development: Community Sandbox
DHCP Test
Eclipse Plugin: Community Sandbox
Hob: Community Sandbox
Installation: Community Sandbox
Kernel Development: Community Sandbox
Kernel: Community Sandbox
Matchbox: Community Sandbox
Meta-yocto: Community Sandbox
OE-Core: Community Sandbox
Package Management Issues: Community Sandbox
Pseudo: Community Sandbox
Quick Start: Community Sandbox
References: Community Sandbox
Runtime: Community Sandbox
Sato: Community Sandbox
Security - Recipe Upgrade: Community Sandbox
Security: Community Sandbox
Swabbeer: Community Sandbox
System Startup: Community Sandbox
Test plans of BI
Toaster: Community Sandbox
Website: Community Sandbox
Wiki: Community Sandbox
Comment 3 Jose Perez C 2016-06-06 21:39:23 UTC 
Yes, I think is better to remove the global write access to the test plans/ runs that are not labeled as sandbox to keep the integrity of the test plans and avoid losing information as in the past.
Comment 4 Jose Perez C 2016-06-06 21:40:17 UTC 
Yes, I think is better to remove the global write access to the test plans/ runs that are not labeled as sandbox to keep the integrity of the test plans and avoid losing information as in the past.
Comment 5 Jose Perez C 2016-06-06 21:42:18 UTC 
Michael please proceed with the updates
Comment 6 Michael Halstead 2016-06-06 21:44:16 UTC 
I've updated the following to remove global write access.

Community
DHCP Test
Test plans of BI
Comment 7 Jose Perez C 2016-06-07 15:15:15 UTC 
Test Plans are now public readable on Testopia