[theme-reviewers] Rogue Trac Users

[Edward Caissie]

At first look I would agree a "Reviewer" group may be the better method to
use, at least until something else can be sorted out, hopefully via
automation.

The only concern, as Otto is bringing to light, is we would need an Admin to
manage the group.

I'm hoping to see more people get involved in the process, so it may become
cumbersome for a non-reviewer to manage this group; which leads to the
question: is it possible for one or two of the group's members be given
group-admin privileges?


Cais.

On Thu, Sep 2, 2010 at 5:23 PM, Chip Bennett <chip at chipbennett.net> wrote:

> On Thu, Sep 2, 2010 at 3:47 PM, Otto <otto at ottodestruct.com> wrote:
>
>> On Thu, Sep 2, 2010 at 3:04 PM, Chip Bennett <chip at chipbennett.net>
>> wrote:
>> > 1) Trac users cannot assign themselves their own tickets (this should be
>> > enforceable through Trac, hopefully once Otto fixes associating tickets
>> with
>> > actual Trac usernames, rather than "themetracbot")
>>
>> This turns out to be trickier than it seemed at first. So, it might
>> take me a while, don't expect quick turnaround.
>>
>> Expect me to make a test ticket or two when trying this out. Just ignore
>> them.
>>
>> > 2) keywords can only be modified by admins (we don't need to be
>> modifying
>> > these ourselves anyway, do we?)
>>
>> Trac considers priority, assignment, keywords, etc to all be part of
>> the same set of permissions. Exceptions: description field and cc
>> field have their own permissions.
>>
>> Only way I can think of preventing this problem is to define who is a
>> reviewer. This can be done, but it requires management by an admin to
>> add/remove permissions from users (actually, you can use a reviewer
>> group mechanism, but you still have to be an admin to do it).
>>
>> If you want to create a reviewers group and remove the ability of
>> normal users to resolve tickets (reserving that to the reviewers
>> group), well then that's something ya'll have to decide.
>>
>> You can see the full list of trac permissions and how they work here:
>> http://trac.edgewall.org/wiki/TracPermissions
>
>
> Hmm, perhaps a "Reviewers" group with custom permissions is the
> best/easiest way to go?
>
> Then, everyone else can only add comments to tickets, and not change their
> status/keywords/owner/etc.
>
> What does everyone else think?
>
> Chip
>
> _______________________________________________
> theme-reviewers mailing list
> theme-reviewers at lists.wordpress.org
> http://lists.wordpress.org/mailman/listinfo/theme-reviewers
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.wordpress.org/pipermail/theme-reviewers/attachments/20100902/a3cb53e9/attachment.htm>