From michael.j.tosh at lmco.com Tue Apr 1 15:52:13 2008 From: michael.j.tosh at lmco.com (Tosh, Michael J) Date: Tue, 01 Apr 2008 11:52:13 -0400 Subject: Skins Message-ID: I'd like to add a VT100 skin to http://wiki.mozilla.org/Bugzilla:Addons#Skins, but I don't have an FTP site I can post to. Is there a Bugzilla location where this could be stored? Thanks, Tosh -------------- next part -------------- An HTML attachment was scrubbed... URL: From Steve.Roscio at hp.com Tue Apr 1 16:03:38 2008 From: Steve.Roscio at hp.com (Roscio, Steve) Date: Tue, 1 Apr 2008 16:03:38 +0000 Subject: Skins In-Reply-To: Message-ID: <51D8B1B2F615E640BB9990402AE50AC609D8891EC3@G6W0268.americas.hpqcorp.net> Hi Tosh - You can put it in the same place where we have the VT52 and ASR-33 teletype skins. Your uploads have to be mailed in punched paper tape, tho. :-) - Steve ________________________________ From: developers-owner at bugzilla.org [mailto:developers-owner at bugzilla.org] On Behalf Of Tosh, Michael J Sent: Tuesday, April 01, 2008 9:52 AM To: developers at bugzilla.org Subject: Skins I'd like to add a VT100 skin to http://wiki.mozilla.org/Bugzilla:Addons#Skins, but I don't have an FTP site I can post to. Is there a Bugzilla location where this could be stored? Thanks, Tosh -------------- next part -------------- An HTML attachment was scrubbed... URL: From michael.j.tosh at lmco.com Tue Apr 1 16:15:34 2008 From: michael.j.tosh at lmco.com (Tosh, Michael J) Date: Tue, 01 Apr 2008 12:15:34 -0400 Subject: Skins In-Reply-To: <51D8B1B2F615E640BB9990402AE50AC609D8891EC3@G6W0268.americas.hpqcorp.net> References: <51D8B1B2F615E640BB9990402AE50AC609D8891EC3@G6W0268.americas.hpqcorp.net> Message-ID: what about sending it over a 2400 baud modem? I'm not a fan of paying postage. ________________________________ From: developers-owner at bugzilla.org [mailto:developers-owner at bugzilla.org] On Behalf Of Roscio, Steve Sent: Tuesday, April 01, 2008 12:04 PM To: developers at bugzilla.org Subject: Re: Skins Hi Tosh - You can put it in the same place where we have the VT52 and ASR-33 teletype skins. Your uploads have to be mailed in punched paper tape, tho. :-) - Steve ________________________________ From: developers-owner at bugzilla.org [mailto:developers-owner at bugzilla.org] On Behalf Of Tosh, Michael J Sent: Tuesday, April 01, 2008 9:52 AM To: developers at bugzilla.org Subject: Skins I'd like to add a VT100 skin to http://wiki.mozilla.org/Bugzilla:Addons#Skins , but I don't have an FTP site I can post to. Is there a Bugzilla location where this could be stored? Thanks, Tosh -------------- next part -------------- An HTML attachment was scrubbed... URL: From Steve.Roscio at hp.com Tue Apr 1 16:29:50 2008 From: Steve.Roscio at hp.com (Roscio, Steve) Date: Tue, 1 Apr 2008 16:29:50 +0000 Subject: Skins In-Reply-To: Message-ID: <51D8B1B2F615E640BB9990402AE50AC609D88E4056@G6W0268.americas.hpqcorp.net> There is a 110 baud acoustic coupler available... ________________________________ From: developers-owner at bugzilla.org [mailto:developers-owner at bugzilla.org] On Behalf Of Tosh, Michael J Sent: Tuesday, April 01, 2008 10:16 AM To: developers at bugzilla.org Subject: Re: Skins what about sending it over a 2400 baud modem? I'm not a fan of paying postage. ________________________________ From: developers-owner at bugzilla.org [mailto:developers-owner at bugzilla.org] On Behalf Of Roscio, Steve Sent: Tuesday, April 01, 2008 12:04 PM To: developers at bugzilla.org Subject: Re: Skins Hi Tosh - You can put it in the same place where we have the VT52 and ASR-33 teletype skins. Your uploads have to be mailed in punched paper tape, tho. :-) - Steve ________________________________ From: developers-owner at bugzilla.org [mailto:developers-owner at bugzilla.org] On Behalf Of Tosh, Michael J Sent: Tuesday, April 01, 2008 9:52 AM To: developers at bugzilla.org Subject: Skins I'd like to add a VT100 skin to http://wiki.mozilla.org/Bugzilla:Addons#Skins, but I don't have an FTP site I can post to. Is there a Bugzilla location where this could be stored? Thanks, Tosh -------------- next part -------------- An HTML attachment was scrubbed... URL: From bloqueador.rastreador at localizador.gps.com Tue Apr 1 23:47:01 2008 From: bloqueador.rastreador at localizador.gps.com (bloqueador sem mensalidade) Date: Tue, 1 Apr 2008 20:47:01 -0300 Subject: 21280123 Bloqueador gps gsm - localizador gps gsm - sem mensalidade - alarme automotivo , alarme para carros 212801236603540 Message-ID: Bloqueador ve?cluar com tecnologia gsm - Sem mensalidades Tenha toda seguran?a para seu carro com um pre?o justo. Apenas R$ 299,00 ( sem mensalidades ) http://bloqueadorgsm.vila.bol.com.br/ Compare e Compre. Rastreador de Ve?culo Rastreadores de Ve?culos Rastreador GPS Rastreadores GPS Rastreador Ituran Rastreadores Ituran Rastreador Port?til Rastreadores Port?teis. Assist?ncia 24 Horas Visite agora mesmo nosso site. http://bloqueadorgsm.vila.bol.com.br/ Graber - Teletrim - Tele Trim - Ituran - Rastreadores gps , Localizadores, Bloqueadores Graber - Teletrim - Tele Trim - Ituran - Rastreadores gps , Localizadores, Bloqueadores Graber - Teletrim - Tele Trim - Ituran - Rastreadores gps , Localizadores, Bloqueadores Graber - Teletrim - Tele Trim - Ituran - Rastreadores gps , Localizadores, Bloqueadores Graber - Teletrim - Tele Trim - Ituran - Rastreadores gps , Localizadores, Bloqueadores -------------- next part -------------- _______________________________________________ dev-apps-bugzilla mailing list dev-apps-bugzilla at lists.mozilla.org https://lists.mozilla.org/listinfo/dev-apps-bugzilla From mkanat at bugzilla.org Thu Apr 3 23:53:59 2008 From: mkanat at bugzilla.org (Max Kanat-Alexander) Date: Thu, 3 Apr 2008 16:53:59 -0700 Subject: Assistance with landfill? Message-ID: <20080403165359.469558de@es-compy> I often get people emailing me to ask if they can have admin permissions on landfill. I have lots of other things to do, and I'd really like somebody else to take over this job. The rules are, basically: * Anybody can have admin privs who emails and asks, if they don't seem shady. I ask them only to add things, and not modify anything that already exists. * I give people the minimum privileges that they need to test out what they want to test. * People who want to play with custom fields need their own installation, because custom fields can't be deleted and I don't want to clutter up the bugzilla-tip installation. Installs can be made using the landfill /tools/ tools. It's not very hard, I just don't want to be doing it anymore. If anybody would like to help out with this, please email me directly. This could eventually lead to more landfill admin privileges, since I'd also like to get out of doing all of that at some point. -Max -- http://www.everythingsolved.com/ Competent, Friendly Bugzilla and Perl Services. Everything Else, too. From nelhawar at redhat.com Fri Apr 4 00:40:21 2008 From: nelhawar at redhat.com (Noura Elhawary) Date: Fri, 04 Apr 2008 10:40:21 +1000 Subject: New WebService functions discussion Message-ID: <1207269621.4109.16.camel@localhost.localdomain> Hi All, Few points I would like to discuss with you in the upcoming bugzilla meeting. It is all related to the new WebService functions that have milestone 4.0 currently set for them. I wasn't sure if it is a good idea to put these notes in the meeting wiki as they are so detailed so maybe here is a good place for them. Please take a look at them, I hope we can reach a decision on them by the next meeting :) NOTE : Bug ids are included in the issues related to them. Bugzilla/WebService/User.pm ---------------------------- 1- API consistency between the different User.pm functions , the following names are the ones that should be used for the API's different functions in the passed hash params and also in the returned values: User fields: id, name, real_name, email, can_login, email_enabled, disabled_text Note: We might need to change the param name 'full_name' in User.create to 'real_name' to match the other API functions User.get Bug#412725 and User.update Bug#416137 2- User.get(), Bug#412725 : - Security Issue: only users in 'editusers' group gets the following information about other users: disabled_text, email_enabled, and and can_login. 3- User.update(), Bug#416137: - User needs to be in 'editusers' group to be able to update other user's information ,, this is the only privilege needed. - The changes hash returned from calling $user.update will be returned to the user, but the names will be overridden to match with the agreed user field names for API consistency. - If User.update() will eventually be allowed to update permissions as well, then we will need to allow persons with bless privileges for particular groups to be allowed to add/remove users from those groups. - shall we call the hash key update, updates just to consistent with ids and names in the passed parameters hash. --------------------------------------------------------------------------- Bugzilla/WebService/Bug.pm --------------------------- 1- Bug.get(), Bug#413770: - It is more user friendly and more useful to return names instead of ids , so all returned user ids for bug reporter,assigned_to , qa_contact, product and component should be converted to names, or we can return both names and ids. Or reporter, assigned_to, etc could be a hashes that contains the user info such as id, email, real_name, etc. component would be hash containing id, name, etc. - Bug.get can give three different types of returns depending on the passed parameters: - passing only bug ids $rpc->call('Bug.get', {ids => [1,2]}) returns only basic information in the bug object similar to the current behavior but with names returned. - passing bug ids and all flag , $rpc->call('Bug.get', {ids => [1,2], all => 1}) returns all bug information that we can get from bug object and by calling the accessor functions to get: cc, dependson, blocked, longdescs, keywords, groups, attachments, flag_types, dup_id, actual_time and milestoneurl - specifying the fields we want in return: $rpc->call('Bug.get',{ids =>[1,2],fields =>[priority, keywords]}) and this will return only the fields requested. 2- Bug.get_activity(), Bug#424079: - The function gets list of bug ids/aliases and returns hash with keys: id, alias, incomplete_data and operation , maybe can use better names as data_iscomplete and history - should this function be separate or should we include it in Bug.get() .. so would be something like this: $rpc->call('Bug.get',{ids =>[1,2],fields =>[bugs_activity]}) or $rpc->call('Bug.get',{ids =>[1,2], bugs_activity => 1}) 3- Bug.update(), Bug#418342: - depends on the function set_all,, is it ready now to write it and change process_bug.cgi to use it? 2 issues were blocking set_all : 1- ability to make mass bug updates for everything except bug alias , and moving sending email code from process_bug.cgi ? so is it right time to start writing set_all now? ------------------------------------------------------------------------- Bugzilla/WebService/Component.pm, -------------------------------- 1- API consistency between Component.pm functions, the following names should be used for component fields in passed parameters or returned values: Component fields: id, name, product_name, product_id, default_cc default_assigned_to, default_qa_contact using default_* will cause writing some extra code for Component.update to change the names returned in the changes hash from $component.update to match with the above names for API consistency ,, is there any plans that default_* names will be the ones used all over the code , replacing initailowner, initialqacontact, etc ? 2- Security Issue: Non privileged users shouldn't be able to know about the existence of confidential products when they try to update or get components they can not access. Solution: is to get $user->get_accessible_products() for the user and check that the product names they passed is in their accessible list of products. Please take a look at the patch in Bug#385282 for that solution. 3- Component.update(), Bug#419456: - code is getting a bit complicated in this function for 2 reasons: a- change the names returned in the changes hash to match with the selected component field names for API consistency. b- convert user ids returned in the changes hash to login names. 4- Component.get_by_product, Bug#424921: - shall this function be separate or should it be in Component.get? I vote for making it separate because the returned value has different format to Component.get, this function should return component information grouped by passed product names, where as Component.get will return single component information for each passed component? ----------------------------------------------------------------------- One last general note: shall we allow the values passed into the WebService functions to be single as well as lists for example for User.get we can have $rpc->call('User.get', { ids => [1,2]}) or $rpc->call('User.get, {ids => 1}) do in the function code we will expect both by : my @ids = ref($params->{ids}) ? @{$params->{ids}} : ($params->{ids}); -------------------------------------------------------------------- Thanks, Noura From mkanat at bugzilla.org Fri Apr 4 00:50:32 2008 From: mkanat at bugzilla.org (Max Kanat-Alexander) Date: Thu, 3 Apr 2008 17:50:32 -0700 Subject: New WebService functions discussion In-Reply-To: <1207269621.4109.16.camel@localhost.localdomain> References: <1207269621.4109.16.camel@localhost.localdomain> Message-ID: <20080403175032.3c80d9ee@es-compy> On Fri, 04 Apr 2008 10:40:21 +1000 Noura Elhawary wrote: > Note: We might need to change the param name 'full_name' in > User.create to 'real_name' to match the other API functions User.get > Bug#412725 and User.update Bug#416137 Yes, I agree, but we should keep full_name as an alias for backwards-compatibility. > - Security Issue: only users in 'editusers' group gets the > following information about other users: disabled_text, > email_enabled, and and can_login. Yes, that's fine. > 3- User.update(), Bug#416137: > - User needs to be in 'editusers' group to be able to update other > user's information ,, this is the only privilege needed. Correct. > - The changes hash returned from calling $user.update will be > returned to the user, but the names will be overridden to match > with the agreed user field names for API consistency. Yes. > - If User.update() will eventually be allowed to update permissions > as well, then we will need to allow persons with bless privileges for > particular groups to be allowed to add/remove users from those > groups. Yes, but don't worry about that right now. > - shall we call the hash key update, updates just to consistent with > ids and names in the passed parameters hash. What? > Bugzilla/WebService/Bug.pm > - It is more user friendly and more useful to return names instead > of ids , so all returned user ids for bug reporter,assigned_to , > qa_contact, product and component should be converted to names, > or we can return both names and ids. Or reporter, assigned_to, > etc could be a hashes that contains the user info such as id, email, > real_name, etc. component would be hash containing id, name, etc. Yes, it would be better to return login names as opposed to IDs. No hashes necessary. The "internals" hash item does not need to be adjusted. > - passing bug ids and all flag , > $rpc->call('Bug.get', {ids => [1,2], all => 1}) > returns all bug information that we can get from bug object > and by calling the accessor functions to get: cc, dependson, > blocked, longdescs, keywords, groups, attachments, > flag_types, dup_id, actual_time and milestoneurl I don't want to implement that right now. > - specifying the fields we want in return: > $rpc->call('Bug.get',{ids =>[1,2],fields =>[priority, > keywords]}) and this will return only the fields requested. Yes, but let's call it include_fields. (As we might want to add exclude_fields later at some point.) > 2- Bug.get_activity(), Bug#424079: > - The function gets list of bug ids/aliases and returns hash > with keys: id, alias, incomplete_data and operation , maybe > can use better names as data_iscomplete and history Don't return incomplete_data, that was a hack to fix an old bug in Bugzilla and shouldn't be perpetuated in the WebService. You should return a hash that looks something like this: 1234 => { [ { time => '2008-04-02 04:00:00', field => 'priority', from => 'P1', to => 'P2' }, ], }, However, I'm not entirely certain about that format yet. We might make some adjustments to the way the bugs_activity table is structured in 4.0, so I'd say to put this off for now. > - should this function be separate or should we include it > in Bug.get() .. so would be something like this: It should be separate. > 3- Bug.update(), Bug#418342: > - depends on the function set_all,, is it ready now to write it > and change process_bug.cgi to use it? Yes, I suppose so. Please write it in pieces, though. That is, move individual bits of process_bug.cgi into set_all in individual bugs. Don't move it all at once--that will be too big to review. > 2 issues were blocking set_all: 1- ability to make mass bug > updates for everything except bug alias , and moving sending > email code from process_bug.cgi ? so is it right time to start writing > set_all now? Yeah, you don't have to wait for those other things to at least start moving *some* things into set_all. > 1- API consistency between Component.pm functions, the following names > should be used for component fields in passed parameters or > returned values: > Component fields: id, name, product_name, product_id, default_cc > default_assigned_to, default_qa_contact Use "product" instead of "product_name", since we'll just be using "product" everywhere for that, I think. > using default_* will cause writing some extra code for > Component.update to change the names returned in the changes > hash from $component.update to match with the above names > for API consistency Yes, that's fine. > is there any plans that default_* > names will be the ones used all over the code , replacing > initailowner, initialqacontact, etc ? It's possible, but I have no plans to implement that right now. So just fix it in the WebService. We're much more concerned about API consistency in the WebService than internally in Bugzilla. > 2- Security Issue: Non privileged users shouldn't be able to know > about the existence of confidential products when they try to > update or get components they can not access. Solution: is to > get $user->get_accessible_products() for the user and check that > the product names they passed is in their accessible list of > products. Please take a look at the patch in Bug#385282 for > that solution. Yes, that sounds right, though I haven't looked at the patch. > 3- Component.update(), Bug#419456: > - code is getting a bit complicated in this function for 2 reasons: > a- change the names returned in the changes hash to match with > the selected component field names for API consistency. Perhaps you should write a general function to do that, since we're going to have to do it in a few places. > b- convert user ids returned in the changes hash to login names. Yes, that just has to be done. I do the same thing inside of Bug.update for fixing the bugs_activity table. > 4- Component.get_by_product, Bug#424921: > - shall this function be separate or should it be in Component.get? It should be in Component.get. > I vote for making it separate because the returned value has > different format to Component.get, this function should return > component information grouped by passed product names, where as > Component.get will return single component information for each > passed component? You should unify those return types into a single type. > One last general note: shall we allow the values passed into the > WebService functions to be single as well as lists for example for > User.get we can have > > $rpc->call('User.get', { ids => [1,2]}) > or > $rpc->call('User.get, {ids => 1}) > > do in the function code we will expect both by : > my @ids = ref($params->{ids}) ? @{$params->{ids}} : ($params->{ids}); I think that would be nice for users of the WebService, but I think it's simpler to be completely consistent and always require an array. -Max -- http://www.everythingsolved.com/ Competent, Friendly Bugzilla and Perl Services. Everything Else, too. From lpsolit at gmail.com Fri Apr 4 20:39:28 2008 From: lpsolit at gmail.com (=?ISO-8859-1?Q?Fr=E9d=E9ric_Buclin?=) Date: Fri, 04 Apr 2008 22:39:28 +0200 Subject: Minutes of our last three Bugzilla meetings Message-ID: <47F69200.8070800@gmail.com> Hi all, I finally had the time to write the minutes of our last three Bugzilla meetings: http://wiki.mozilla.org/Bugzilla:Meetings:2008-02-12 http://wiki.mozilla.org/Bugzilla:Meetings:2008-02-26 http://wiki.mozilla.org/Bugzilla:Meetings:2008-03-25 Our next meeting will be next Tuesday, on April 8 at 18:00 GMT (11:00 PDT, 20:00 CEST). Everyone is free to attend. Please join us in the #bugzilla-meeting channel on IRC: irc://irc.mozilla.org/bugzilla-meeting . See you on Tuesday, Fr?d?ric From bloqueador.rastreador at localizador.gps.com Sat Apr 5 15:44:45 2008 From: bloqueador.rastreador at localizador.gps.com (bloqueador sem mensalidade) Date: Sat, 5 Apr 2008 12:44:45 -0300 Subject: 430 bloqueador veicular sem mensalidades - =?ISO-8859-1?Q?http://bloqueadorgsm.vilabol.uol.com.br=11?= 4300458546033588358032115 Message-ID: Bloqueador ve?cluar com tecnologia gsm - Sem mensalidades Tenha toda seguran?a para seu carro com um pre?o justo. Apenas R$ 299,00 ( sem mensalidades ) http://bloqueadorgsm.vila.bol.com.br/ Compare e Compre. Rastreador de Ve?culo Rastreadores de Ve?culos Rastreador GPS Rastreadores GPS Rastreador Ituran Rastreadores Ituran Rastreador Port?til Rastreadores Port?teis. Assist?ncia 24 Horas Visite agora mesmo nosso site. http://bloqueadorgsm.vila.bol.com.br/ Graber - Teletrim - Tele Trim - Ituran - Rastreadores gps , Localizadores, Bloqueadores Graber - Teletrim - Tele Trim - Ituran - Rastreadores gps , Localizadores, Bloqueadores Graber - Teletrim - Tele Trim - Ituran - Rastreadores gps , Localizadores, Bloqueadores Graber - Teletrim - Tele Trim - Ituran - Rastreadores gps , Localizadores, Bloqueadores Graber - Teletrim - Tele Trim - Ituran - Rastreadores gps , Localizadores, Bloqueadores mxO47V?";a&mFNHy'KgO+WHw#@(F*6k>Hco[I9=K -------------- next part -------------- _______________________________________________ dev-apps-bugzilla mailing list dev-apps-bugzilla at lists.mozilla.org https://lists.mozilla.org/listinfo/dev-apps-bugzilla From steve.roscio at hp.com Mon Apr 7 19:28:35 2008 From: steve.roscio at hp.com (Steve Roscio) Date: Mon, 07 Apr 2008 13:28:35 -0600 Subject: Worthwhile? bug dependency list? In-Reply-To: References: Message-ID: <1207596515.12597.8.camel@farm.cxo.cpqcorp.net> Howdy Devos - I've hacked Bugzilla (buglist.cgi) to create a "dependency list", similar to a dependency tree or graph, but that produces a nested buglist with clickable +/- icons. Would you consider this a worthwhile enhancement to Bugzilla? I did this for my day job, it's something we needed here at HP. I attached three screenshots to bug#371030 ( https://bugzilla.mozilla.org/show_bug.cgi?id=371030 ) so you can get an idea of what I mean. - Steve -------------- next part -------------- An HTML attachment was scrubbed... URL: From guy.pyrzak at gmail.com Mon Apr 7 19:48:17 2008 From: guy.pyrzak at gmail.com (Guy Pyrzak) Date: Mon, 7 Apr 2008 12:48:17 -0700 Subject: Worthwhile? bug dependency list? In-Reply-To: <1207596515.12597.8.camel@farm.cxo.cpqcorp.net> References: <1207596515.12597.8.camel@farm.cxo.cpqcorp.net> Message-ID: I think it is pretty cool. Although taking a hack to good code is a pain, but if you're up for it. I'd like to see that as an option. -Guy On Mon, Apr 7, 2008 at 12:28 PM, Steve Roscio wrote: > Howdy Devos - > > I've hacked Bugzilla (buglist.cgi) to create a "dependency list", similar > to a dependency tree or graph, but that produces a nested buglist with > clickable +/- icons. Would you consider this a worthwhile enhancement to > Bugzilla? I did this for my day job, it's something we needed here at HP. > > I attached three screenshots to bug#371030 ( > https://bugzilla.mozilla.org/show_bug.cgi?id=371030 ) > so you can get an idea of what I mean. > > - Steve > -------------- next part -------------- An HTML attachment was scrubbed... URL: From michael.j.tosh at lmco.com Mon Apr 7 19:50:07 2008 From: michael.j.tosh at lmco.com (Tosh, Michael J) Date: Mon, 07 Apr 2008 15:50:07 -0400 Subject: Worthwhile? bug dependency list? In-Reply-To: References: <1207596515.12597.8.camel@farm.cxo.cpqcorp.net> Message-ID: nice work. ________________________________ From: developers-owner at bugzilla.org [mailto:developers-owner at bugzilla.org] On Behalf Of Guy Pyrzak Sent: Monday, April 07, 2008 3:48 PM To: developers at bugzilla.org Subject: Re: Worthwhile? bug dependency list? I think it is pretty cool. Although taking a hack to good code is a pain, but if you're up for it. I'd like to see that as an option. -Guy On Mon, Apr 7, 2008 at 12:28 PM, Steve Roscio wrote: Howdy Devos - I've hacked Bugzilla (buglist.cgi) to create a "dependency list", similar to a dependency tree or graph, but that produces a nested buglist with clickable +/- icons. Would you consider this a worthwhile enhancement to Bugzilla? I did this for my day job, it's something we needed here at HP. I attached three screenshots to bug#371030 ( https://bugzilla.mozilla.org/show_bug.cgi?id=371030 ) so you can get an idea of what I mean. - Steve -------------- next part -------------- An HTML attachment was scrubbed... URL: From Thorsten.Claus at keytech.de Tue Apr 8 07:26:05 2008 From: Thorsten.Claus at keytech.de (Thorsten Claus) Date: Tue, 8 Apr 2008 09:26:05 +0200 Subject: Worthwhile? bug dependency list? In-Reply-To: <1207596515.12597.8.camel@farm.cxo.cpqcorp.net> References: <1207596515.12597.8.camel@farm.cxo.cpqcorp.net> Message-ID: <1A8D91D50FDF8D4E80E36F36C04D17A5616A20@ktserver.keytech.de> I fully agree, that would be a nice and useful enhancement. Howdy Devos - I've hacked Bugzilla (buglist.cgi) to create a "dependency list", similar to a dependency tree or graph, but that produces a nested buglist with clickable +/- icons. Would you consider this a worthwhile enhancement to Bugzilla? I did this for my day job, it's something we needed here at HP. I attached three screenshots to bug#371030 ( https://bugzilla.mozilla.org/show_bug.cgi?id=371030 ) so you can get an idea of what I mean. - Steve -------------- next part -------------- An HTML attachment was scrubbed... URL: From mdurthaler at sbcglobal.net Tue Apr 8 17:21:09 2008 From: mdurthaler at sbcglobal.net (Michael Durthaler) Date: Tue, 8 Apr 2008 13:21:09 -0400 Subject: Michael W. Durthaler Message-ID: <000801c8999c$f0524310$68c8a8c0@DesignLaptop> Dear All, I'm the new kid on the block and need to make myself known. What I'd like to help out with is clearing bugs to start with and coming up with hopefully clever ideas after I'm fully on board. I've done work on Dot Net Nuke modules, which entails what you folks call the Module Control View but as usual with Microsoft and .Net, they have their own name for it. In a nutshell, I've spent the last 2 years working a bit with Windows solutions but mainly Web Applications, from the database end to the "view" end. I'm quite well experienced in SQL, would love to learn Oracle and MySQL. From using the abstraction structure in DNN (View, code behind, data provider, controller, SQL data provider, etc.) it's easy to see how and why your code is laid out as it is. By the way, this is very neatly and logically organized. Kudos, my new friends. I do like to hear back if my submissions are error-free so please info me not only when changes are needed after submission of patches or files but please let me know when things are OK. This allows me to fully take my attention off an item and really focus on the next one. As far as computer skills, my typing speed is 42 WPM plus, I'm experienced with Visual Studio 2005 (.Net 2.0 framework), visual basic. I've done work in DOS itself but it's been over a decade since I've used it so some kinks are showing up :-). I did office solutions for a company called Axiom International as part of my work setting up their sales backlines. I was not the techie at this point but did set up their Windows solution for sales, faxing from the desktop, emailing from the desktop, etc. This was from 95 to 97. After this, I took work with MC Test Products from 1997 to 2003 and designed circuit boards for a living. I worked on AutoCAD versions 12, 13 and 14. I was also involved a bit with it's coding and have some knowledge of Auto LISP. >From 2003 to 2006 I took on other work after the .bomb crash and a friend of mine talked me into programming with .Net, from there to now, here I am. I bring to the table excellent communication skills as far as wording menus and pages in solutions. The Center for Sales Strategy (www.csscenter.com ) is one client that the company I contracted with had me do extensive maintenance work on. Their CEO is the author of a major book on sales, Close Like the Pros so from his rather arduous input on changes needed, graphics styling, very demanding work on phrasing and so on I got used to grammar in the strictest sense of the word. It was a hard adjustment but worth it as the person is an excellent author so I learned it right. (Steve Marx is the gentleman's name, by the way) Other than that, when I do created a solution I'm a neat freak with how I lay the code out. I like things to really work well and will tweak the daylights out of a piece of code until I really am happy with it. My experience up until now has been more with maintenance than creation of whole new ideas so this is a bit new to me. So far but it's only been a week or so, I find the sense of humor, attention to quality, organization and so on with this group very positive. I think I'll continue to find this and I like the atmosphere of the group. Feel free to mail or contact me at any time. Perl is a new language for me but I studied C at one point so it's not totally unfamiliar. Having worked with the basic coding tools in VB (Visual Studio), the techniques in Perl are actually easier, I find because Perl is intuitive and has a no-limits philosophy behind it. I find with the way it's taught when I get to the end of a chapter I can actually USE it because frankly, it makes more sense. (Not that I'll give up Windows, VB, DNN and so on - it's just too much fun!) I would love to hear back from anyone in the group and make new friends. Let me hear from you - please don't let this go un-replied to! :-) (I'm just too sensitive a guy, I guess) It's great to be on board - blame Max Kanat-Alexander for me being here. :-) Best, Michael W. Durthaler Durthaler Tech Services .Net Solutions PO Box 4236 Newark, OH 43058 mdurthaler at sbcglobal.net 740 739 4311 - Desk 740 739 4498 - Laptop -------------- next part -------------- An HTML attachment was scrubbed... URL: From michael.j.tosh at lmco.com Tue Apr 8 17:41:25 2008 From: michael.j.tosh at lmco.com (Tosh, Michael J) Date: Tue, 08 Apr 2008 13:41:25 -0400 Subject: Michael W. Durthaler In-Reply-To: <000801c8999c$f0524310$68c8a8c0@DesignLaptop> References: <000801c8999c$f0524310$68c8a8c0@DesignLaptop> Message-ID: welcome! For me, the trick to Perl was figuring out all the shorthand stuff. Like knowing that s/something/else/ig; on a line will change the $_ variable, which can come from a function argument. Or sorting hashes in unique ways, I still don't get that syntax yet. Good luck. ________________________________ From: developers-owner at bugzilla.org [mailto:developers-owner at bugzilla.org] On Behalf Of Michael Durthaler Sent: Tuesday, April 08, 2008 1:21 PM To: developers at bugzilla.org Subject: Michael W. Durthaler Dear All, I'm the new kid on the block and need to make myself known. What I'd like to help out with is clearing bugs to start with and coming up with hopefully clever ideas after I'm fully on board. I've done work on Dot Net Nuke modules, which entails what you folks call the Module Control View but as usual with Microsoft and .Net, they have their own name for it. In a nutshell, I've spent the last 2 years working a bit with Windows solutions but mainly Web Applications, from the database end to the "view" end. I'm quite well experienced in SQL, would love to learn Oracle and MySQL. From using the abstraction structure in DNN (View, code behind, data provider, controller, SQL data provider, etc.) it's easy to see how and why your code is laid out as it is. By the way, this is very neatly and logically organized. Kudos, my new friends. I do like to hear back if my submissions are error-free so please info me not only when changes are needed after submission of patches or files but please let me know when things are OK. This allows me to fully take my attention off an item and really focus on the next one. As far as computer skills, my typing speed is 42 WPM plus, I'm experienced with Visual Studio 2005 (.Net 2.0 framework), visual basic. I've done work in DOS itself but it's been over a decade since I've used it so some kinks are showing up :-). I did office solutions for a company called Axiom International as part of my work setting up their sales backlines. I was not the techie at this point but did set up their Windows solution for sales, faxing from the desktop, emailing from the desktop, etc. This was from 95 to 97. After this, I took work with MC Test Products from 1997 to 2003 and designed circuit boards for a living. I worked on AutoCAD versions 12, 13 and 14. I was also involved a bit with it's coding and have some knowledge of Auto LISP. >From 2003 to 2006 I took on other work after the .bomb crash and a friend of mine talked me into programming with .Net, from there to now, here I am. I bring to the table excellent communication skills as far as wording menus and pages in solutions. The Center for Sales Strategy (www.csscenter.com ) is one client that the company I contracted with had me do extensive maintenance work on. Their CEO is the author of a major book on sales, Close Like the Pros so from his rather arduous input on changes needed, graphics styling, very demanding work on phrasing and so on I got used to grammar in the strictest sense of the word. It was a hard adjustment but worth it as the person is an excellent author so I learned it right. (Steve Marx is the gentleman's name, by the way) Other than that, when I do created a solution I'm a neat freak with how I lay the code out. I like things to really work well and will tweak the daylights out of a piece of code until I really am happy with it. My experience up until now has been more with maintenance than creation of whole new ideas so this is a bit new to me. So far but it's only been a week or so, I find the sense of humor, attention to quality, organization and so on with this group very positive. I think I'll continue to find this and I like the atmosphere of the group. Feel free to mail or contact me at any time. Perl is a new language for me but I studied C at one point so it's not totally unfamiliar. Having worked with the basic coding tools in VB (Visual Studio), the techniques in Perl are actually easier, I find because Perl is intuitive and has a no-limits philosophy behind it. I find with the way it's taught when I get to the end of a chapter I can actually USE it because frankly, it makes more sense. (Not that I'll give up Windows, VB, DNN and so on - it's just too much fun!) I would love to hear back from anyone in the group and make new friends. Let me hear from you - please don't let this go un-replied to! :-) (I'm just too sensitive a guy, I guess) It's great to be on board - blame Max Kanat-Alexander for me being here. :-) Best, Michael W. Durthaler Durthaler Tech Services .Net Solutions PO Box 4236 Newark, OH 43058 mdurthaler at sbcglobal.net 740 739 4311 - Desk 740 739 4498 - Laptop -------------- next part -------------- An HTML attachment was scrubbed... URL: From mkanat at bugzilla.org Wed Apr 9 02:16:50 2008 From: mkanat at bugzilla.org (Max Kanat-Alexander) Date: Tue, 8 Apr 2008 19:16:50 -0700 Subject: landfill upgraded Message-ID: <20080408191650.32322ea5@es-compy> justdave and I upgraded landfill to CentOS 5 today (from CentOS 4). I've gone around and fixed the things that I know about, but if anything isn't working on landfill, let me know. -Max -- http://www.everythingsolved.com/ Competent, Friendly Bugzilla and Perl Services. Everything Else, too. From sandeep at fcoos.net Wed Apr 9 18:27:41 2008 From: sandeep at fcoos.net (Sandeep A.S) Date: Wed, 09 Apr 2008 23:57:41 +0530 Subject: Introduction: Sandeep Athiyarath Message-ID: <47FD0A9D.1030206@fcoos.net> Hi, I am Sandeep from Bangalore,India I am a freelancer in open souce domain. Basically I do open souce implementation at customer places and living with fees earning from that.I have more than eight years of experiance in network and system Administration, Out of which 5 years in Linux. As I am more inclined to linux flavours I started my own 3member consultancy as www.fcoos.net [fcoos -flying concepts on open source].Also from my earnings I contribute 5% of the fees to the open source project software I use. Even though I have a good systems and network administration background, in programming I am still in the beginners level.I am learning Perl and template toolkit with the Bugzilla. I know shell scripting a bit and some PHP. I have done a replicated bugzilla Implementation , migrated some old versions to the stable versions of Bugzilla. I hope I would be able to contribute and enjoy the work with Bugzilla team.As I am fairly new in the programming,some guidance will definitely help me out. Thanks Sandeep From michael.j.tosh at lmco.com Wed Apr 9 18:33:09 2008 From: michael.j.tosh at lmco.com (Tosh, Michael J) Date: Wed, 09 Apr 2008 14:33:09 -0400 Subject: Introduction: Sandeep Athiyarath In-Reply-To: <47FD0A9D.1030206@fcoos.net> References: <47FD0A9D.1030206@fcoos.net> Message-ID: Quoting Sandeep A.S: > ...As I am > fairly new in the programming,some > guidance will definitely help me out. > Bugzilla is a good tool to start with, since with Perl and HTML you don't have to worry about make-files and compiling. Bleh. :-) From after.fallout at gmail.com Wed Apr 9 19:29:37 2008 From: after.fallout at gmail.com (Bill Barry) Date: Wed, 09 Apr 2008 13:29:37 -0600 Subject: Introduction: Sandeep Athiyarath In-Reply-To: <47FD0A9D.1030206@fcoos.net> References: <47FD0A9D.1030206@fcoos.net> Message-ID: <47FD1921.3020906@gmail.com> Good luck; some notes: Your website needs to be gone over by someone who natively speaks English and to be reviewed for typos. It is probably not the best thing for there to be ellipses in the menu either (the pages are not very self discoverable prior to viewing them). Considering the market, you may even want the site to be available in several languages (I am assuming any of the work you have gotten so far is through word of mouth and not your web presence, and most of what you do is done on site at a client). As for contributing to Bugzilla, there is plenty of low hanging fruit; certainly some of it doesn't even need programming skills. Take bug 73330 for instance (https://bugzilla.mozilla.org/show_bug.cgi?id=73330). It hasn't been touched in several years (and was filed against Bugzilla 2.13). The patch that is in it was rejected because it didn't pass review and there are some pointers on what needs to be done with it there. As it stands right now, I don't even know if the way the fix was attempted is even a valid direction now. Someone needs to go in and figure out if there is even still an issue there (if so, perhaps this is a good one for the [Good Intro Bug] whiteboard; the email is generated from a template now, isn't it?). -- The bug list: http://tinyurl.com/2mmepu has a bunch of bugs that at least somebody considers to be good introduction bugs, though looking at it I could see more than a few of them being intimidating for someone who is not speaking english as their primary language. Fortunately reviewers exist to help you create a patch worth checking in. Sandeep A.S wrote: > Hi, > I am Sandeep from Bangalore,India > I am a freelancer in open souce domain. Basically I do open souce > implementation at customer places and living with fees > earning from that.I have more than eight years of experiance in > network and system Administration, Out of which > 5 years in Linux. As I am more inclined to linux flavours I started my > own 3member consultancy as www.fcoos.net [fcoos > -flying concepts > on open source].Also from my earnings I contribute 5% of the fees to > the open source project software I use. > > Even though I have a good systems and network administration > background, in programming I am still in the > beginners level.I am learning Perl and template toolkit with the > Bugzilla. I know shell scripting a bit and some PHP. I have done a > replicated bugzilla Implementation , migrated > some old versions to the stable versions of Bugzilla. I hope I would > be able to contribute and enjoy the work with Bugzilla team.As I am > fairly new in the programming,some > guidance will definitely help me out. > > Thanks > Sandeep > > > > > - > To view or change your list settings, click here: > > From kevin.benton at amd.com Wed Apr 9 19:55:56 2008 From: kevin.benton at amd.com (Benton, Kevin) Date: Wed, 9 Apr 2008 12:55:56 -0700 Subject: Introduction: Sandeep Athiyarath In-Reply-To: <47FD0A9D.1030206@fcoos.net> References: <47FD0A9D.1030206@fcoos.net> Message-ID: Sandeep, While you're learning, get a copy of The Pragmatic Programmer (Hunt/Thomas) and read it a little each day. It'll help you learn the ins and outs of programming in general, not just the technical how-to. One of the keys to being a "professional" programmer is knowing more than the syntax of a language and how to make things work. A lot of software engineering is about applying good style and technique to a problem. After reading The Pragmatic Programmer, I would go right to Test Driven Development (Beck). After that, you will likely have found a number of your own resources to go look at. There are plenty of best-practices books out there. No matter what language you start your learning in, focus on learning how to do things in an object-oriented style more than doing things in a serial style. Even if you never intend to write code in it, I strongly suggest learning Java because it teaches you to think in an object-oriented way. Good luck and welcome to the Bugzilla development community. :-) Kevin developers-owner at bugzilla.org wrote: > Hi, > I am Sandeep from Bangalore,India > I am a freelancer in open souce domain. Basically I do open souce > implementation at customer places and living with fees > earning from that.I have more than eight years of experiance in > network and system Administration, Out of which > 5 years in Linux. As I am more inclined to linux flavours I > started my > own 3member consultancy as www.fcoos.net > [fcoos > -flying concepts > on open source].Also from my earnings I contribute 5% of the > fees to the > open source project software I use. > > Even though I have a good systems and network administration > background, > in programming I am still in the > beginners level.I am learning Perl and template toolkit with the > Bugzilla. I know shell scripting a bit and some PHP. I have done a > replicated bugzilla Implementation , migrated > some old versions to the stable versions of Bugzilla. I hope > I would be > able to contribute and enjoy the work with Bugzilla team.As I > am fairly > new in the programming,some > guidance will definitely help me out. > > Thanks > Sandeep > > > > > > - > To view or change your list settings, click here: > Kevin Benton MySQL DBA #5739 Senior Software Developer CAD Global Infrastructure Flow Services Advanced Micro Devices 2950 E Harmony Rd Fort Collins, CO 80528 The opinions stated in this communication do not necessarily reflect the view of Advanced Micro Devices and have not been reviewed by management. This communication may contain sensitive and/or confidential and/or proprietary information. Distribution of such information is strictly prohibited without prior consent of Advanced Micro Devices. This communication is for the intended recipient(s) only. If you have received this communication in error, please notify the sender, then destroy any remaining copies of this communication. From justdave at bugzilla.org Thu Apr 10 07:32:16 2008 From: justdave at bugzilla.org (David Miller) Date: Thu, 10 Apr 2008 03:32:16 -0400 Subject: Developer profiles page Message-ID: <47FDC280.6000709@bugzilla.org> I've made some major updates to the Developer Profiles page at http://www.bugzilla.org/developers/profiles.html I moved several people that haven't been around for a while into the Former Developers section, and added a whole mess of new people who I could find names for. I'm sure I'm still missing a few folks. If you have commit access to the website, feel free to update your own profile if it's missing stuff or out of date. If you don't, you can either ping mkanat or myself, or follow the link at the top of the page. That goes for anyone who's missing who thinks they're active enough that they should be on there, too. -- Dave Miller http://www.justdave.net/ System Administrator, Mozilla Corporation http://www.mozilla.com/ Project Leader, Bugzilla Bug Tracking System http://www.bugzilla.org/ From mkanat at bugzilla.org Sat Apr 12 00:10:14 2008 From: mkanat at bugzilla.org (Max Kanat-Alexander) Date: Fri, 11 Apr 2008 17:10:14 -0700 Subject: "Extension" vs. "Plugin Message-ID: <20080411171014.5d64c9f4@es-compy> Sometimes we call extensions "Extensions" and sometimes we call them "Plugins". Since the directory in CVS is already called "extensions", I propose that we just always call them "Extensions" and stop using the word "plugin" to describe extensions. The word "Extension" is already familiar to Firefox users anyhow, and I don't see any reason why we shouldn't use it. -Max -- http://www.everythingsolved.com/ Competent, Friendly Bugzilla and Perl Services. Everything Else, too. From guy.pyrzak at gmail.com Sat Apr 12 00:41:06 2008 From: guy.pyrzak at gmail.com (Guy Pyrzak) Date: Fri, 11 Apr 2008 17:41:06 -0700 Subject: "Extension" vs. "Plugin In-Reply-To: <20080411171014.5d64c9f4@es-compy> References: <20080411171014.5d64c9f4@es-compy> Message-ID: I personally prefer the term 'plugin' but that's just because it makes sense to me (i even call firefox extensions plugins) but since it says Extension in CVS then I agree, call it what it says it is in the CVS. But I don't think we can stop people from referring it to whatever they want. So yes for now on, if someone talks about plug-ins, we should correct them with the word "extension". -Guy On Fri, Apr 11, 2008 at 5:10 PM, Max Kanat-Alexander wrote: > Sometimes we call extensions "Extensions" and sometimes we call > them "Plugins". Since the directory in CVS is already called > "extensions", I propose that we just always call them "Extensions" and > stop using the word "plugin" to describe extensions. > > The word "Extension" is already familiar to Firefox users > anyhow, and I don't see any reason why we shouldn't use it. > > -Max > -- > http://www.everythingsolved.com/ > Competent, Friendly Bugzilla and Perl Services. Everything Else, too. > - > To view or change your list settings, click here: > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From mkanat at bugzilla.org Sat Apr 12 05:41:06 2008 From: mkanat at bugzilla.org (Max Kanat-Alexander) Date: Fri, 11 Apr 2008 22:41:06 -0700 Subject: "Extension" vs. "Plugin In-Reply-To: References: <20080411171014.5d64c9f4@es-compy> Message-ID: <20080411224106.06a67470@es-compy> On Fri, 11 Apr 2008 17:41:06 -0700 "Guy Pyrzak" wrote: > So yes for now on, if someone talks about > plug-ins, we should correct them with the word "extension". Yeah, but it's more about ourselves, how we refer to them in the documentation and in our bugs and so on. If people outside the Bugzilla development team say "plugin", I don't care. :-) Keeping the term consistent also will help with googling in the future. -Max -- http://www.everythingsolved.com/ Competent, Friendly Bugzilla and Perl Services. Everything Else, too. From lpsolit at gmail.com Sat Apr 12 11:02:33 2008 From: lpsolit at gmail.com (=?ISO-8859-1?Q?Fr=E9d=E9ric_Buclin?=) Date: Sat, 12 Apr 2008 13:02:33 +0200 Subject: "Extension" vs. "Plugin In-Reply-To: <20080411224106.06a67470@es-compy> References: <20080411171014.5d64c9f4@es-compy> <20080411224106.06a67470@es-compy> Message-ID: <480096C9.3040602@gmail.com> Max Kanat-Alexander a ?crit : > the documentation and in our bugs and so on. If people outside the > Bugzilla development team say "plugin", I don't care. :-) Let's make everybody happy: "plextension" or "plugtension". :) From ghendricks at novell.com Mon Apr 14 15:24:01 2008 From: ghendricks at novell.com (Gregary Hendricks) Date: Mon, 14 Apr 2008 09:24:01 -0600 Subject: "Extension" vs. "Plugin In-Reply-To: <480322B1020000D20001F3C1@lucius.provo.novell.com> References: <47FFAA400200009000036F47@lucius.provo.novell.com> <480322B1020000D20001F3C1@lucius.provo.novell.com> Message-ID: <480322B1020000D20001F3C1@lucius.provo.novell.com> On Fri, 2008-04-11 at 17:10 -0700, Max Kanat-Alexander wrote: > Sometimes we call extensions "Extensions" and sometimes we call > them "Plugins". Since the directory in CVS is already called > "extensions", I propose that we just always call them "Extensions" and > stop using the word "plugin" to describe extensions. > > The word "Extension" is already familiar to Firefox users > anyhow, and I don't see any reason why we shouldn't use it. > > -Max >From the Testopia home page: "Testopia is a test case management extension for Bugzilla." I often refer to it as a plugin during casual conversation however. I will try to correct that. Greg From michael.j.tosh at lmco.com Mon Apr 14 15:59:15 2008 From: michael.j.tosh at lmco.com (Tosh, Michael J) Date: Mon, 14 Apr 2008 11:59:15 -0400 Subject: "Extension" vs. "Plugin In-Reply-To: <480322B1020000D20001F3C1@lucius.provo.novell.com> References: <47FFAA400200009000036F47@lucius.provo.novell.com> <480322B1020000D20001F3C1@lucius.provo.novell.com> <480322B1020000D20001F3C1@lucius.provo.novell.com> Message-ID: Quoting Gregary Hendricks: > On Fri, 2008-04-11 at 17:10 -0700, Max Kanat-Alexander wrote: > > Sometimes we call extensions "Extensions" and sometimes we call > > them "Plugins". Since the directory in CVS is already called > > "extensions", I propose that we just always call them "Extensions" > > and stop using the word "plugin" to describe extensions. > > > > The word "Extension" is already familiar to Firefox users > > anyhow, and I don't see any reason why we shouldn't use it. > > > > -Max > > > From the Testopia home page: "Testopia is a test case management > > extension for Bugzilla." > > I often refer to it as a plugin during casual conversation however. I > will try to correct that. > They are "called" Plugins within the Hooks directory... From bbaetz at acm.org Mon Apr 14 22:06:02 2008 From: bbaetz at acm.org (Bradley Baetz) Date: Tue, 15 Apr 2008 08:06:02 +1000 Subject: Extensions and include paths Message-ID: <99435f5b0804141506q56c9694bib52bd5ec00bd52dc@mail.gmail.com> Hi, Extensions and include paths seem a bit confused. Firstly, theres the template path. For a hook, the template needs to be in a file called extensions//template/en/global/code-error-.html.tmpl.. But any templates in an extension that want to be in the 'standard' template include path go under extensions//template/en/{default,custom}//foo.html.tmpl. However, if its a hook thats not part of an extension, the template needs to be a file in the directory template/custom/hook/global/code-error.html.tmpl// Plus, the extensions are added to the template include path even if they're disabled, and they're not precompiled. https://bugzilla.mozilla.org/show_bug.cgi?id=428607 Then theres the library path. When calling a hook from an extension, extensions//lib is temporarily added to the library path. However, some of the hooks (eg webservices) pass back a string for a perl module that is later dynamically required at run time, when that directory isn't part of the libpath, so the module's name actually has to be relative to the top level directory, ie lib::extensions::Example::lib::Foo in those cases. And if the extension has any supporting modules, they have to be done the same way to be used by the webservices module. Which is a bit confusing as well... (No bug for that yet) Also, whats the reason behind the code hooks being a bunch of .pl files rather than a standard perl module with a sub per hook? This is all a bit confusing.... Thoughts? Bradley From mkanat at bugzilla.org Mon Apr 14 22:44:30 2008 From: mkanat at bugzilla.org (Max Kanat-Alexander) Date: Mon, 14 Apr 2008 15:44:30 -0700 Subject: Extensions and include paths In-Reply-To: <99435f5b0804141506q56c9694bib52bd5ec00bd52dc@mail.gmail.com> References: <99435f5b0804141506q56c9694bib52bd5ec00bd52dc@mail.gmail.com> Message-ID: <20080414154430.0a78507b@es-compy> On Tue, 15 Apr 2008 08:06:02 +1000 "Bradley Baetz" wrote: > Also, whats the reason behind the code hooks being a bunch of .pl > files rather than a standard perl module with a sub per hook? No reason. I never saw the hook code until long after it went in, as I recall. A Perl module would probably make more sense. Of course, I'm not sure we'd want everything in one file, but that's not a strict limitation. > This is all a bit confusing.... Thoughts? Well, one way or another, it really ought to be less confusing. :-) That's my only thought on it at the moment. And it ought to be consistent, somehow. -Max -- http://www.everythingsolved.com/ Competent, Friendly Bugzilla and Perl Services. Everything Else, too. From justdave at bugzilla.org Tue Apr 15 05:09:50 2008 From: justdave at bugzilla.org (David Miller) Date: Tue, 15 Apr 2008 01:09:50 -0400 Subject: Extensions and include paths In-Reply-To: <20080414154430.0a78507b@es-compy> References: <99435f5b0804141506q56c9694bib52bd5ec00bd52dc@mail.gmail.com> <20080414154430.0a78507b@es-compy> Message-ID: <4804389E.7030502@bugzilla.org> Max Kanat-Alexander wrote on 4/14/08 6:44 PM: > On Tue, 15 Apr 2008 08:06:02 +1000 "Bradley Baetz" > wrote: >> Also, whats the reason behind the code hooks being a bunch of .pl >> files rather than a standard perl module with a sub per hook? > > No reason. I never saw the hook code until long after it went > in, as I recall. > > A Perl module would probably make more sense. Of course, I'm > not sure we'd want everything in one file, but that's not a strict > limitation. > >> This is all a bit confusing.... Thoughts? > > Well, one way or another, it really ought to be less > confusing. :-) That's my only thought on it at the moment. And it ought > to be consistent, somehow. This is why I had the "make plugins make sense" thing on the Google SoC project list for 2007. I was wondering why nobody added it this year... -- Dave Miller http://www.justdave.net/ System Administrator, Mozilla Corporation http://www.mozilla.com/ Project Leader, Bugzilla Bug Tracking System http://www.bugzilla.org/ From kraus.alexander at gmail.com Tue Apr 15 11:27:00 2008 From: kraus.alexander at gmail.com (alx) Date: Tue, 15 Apr 2008 04:27:00 -0700 (PDT) Subject: How can I access product name via bug id in template Message-ID: <3dea84aa-1066-488e-94e9-9d9f1205461d@8g2000hse.googlegroups.com> Hi, is it somehow possible to get a product name from within a template where i ususaly only have the bug id accessible? I actualy dont want to change the cgi's code, to get the information. In list/list.html.tmpl I found the use of "cgi.param()", so I thought of something like that [% Bug(bugid).product.name %] but that doesn' work at all. thanks alex _______________________________________________ dev-apps-bugzilla mailing list dev-apps-bugzilla at lists.mozilla.org https://lists.mozilla.org/listinfo/dev-apps-bugzilla From michael.j.tosh at lmco.com Tue Apr 15 14:10:56 2008 From: michael.j.tosh at lmco.com (Tosh, Michael J) Date: Tue, 15 Apr 2008 10:10:56 -0400 Subject: How can I access product name via bug id in template In-Reply-To: <3dea84aa-1066-488e-94e9-9d9f1205461d@8g2000hse.googlegroups.com> References: <3dea84aa-1066-488e-94e9-9d9f1205461d@8g2000hse.googlegroups.com> Message-ID: Quoting alx: > Hi, > > is it somehow possible to get a product name from within a template > where i ususaly only have the bug id accessible? > > I actualy dont want to change the cgi's code, to get the information. > > In list/list.html.tmpl I found the use of "cgi.param()", > so I thought of something like that > [% Bug(bugid).product.name %] > but that doesn' work at all. If you are within list/list.html.tmpl, it is likely that you already have an array of bugs available for use. The variables available all come from the cgi's, and you probably don't have to change anything, just understand what and how info is being provided. If you provide the name of the template, and the scope of the use, perhaps it would be easier to answer that specific question. For products, usually [% bug.product %] is all you need to do if you have bug.bug_id available. From kraus.alexander at gmail.com Tue Apr 15 19:02:59 2008 From: kraus.alexander at gmail.com (alx) Date: Tue, 15 Apr 2008 12:02:59 -0700 (PDT) Subject: How can I access product name via bug id in template References: <3dea84aa-1066-488e-94e9-9d9f1205461d@8g2000hse.googlegroups.com> Message-ID: <724e3669-b7a2-4ab4-af02-f590e068aaf9@k10g2000prm.googlegroups.com> list/list.html.tmpl was just an example. I'd like to use the 'links' hook in bug/process/results.html.tmpl to add a link to add an other bug for the last product, so that the user isn't forced to go over 'choose product' again. The browsers back button isn't the solution too, because the old form data is still filled in. So, I can use 'id' but not via the bug object. In process_bug.cgi it seems, that just the id, type and recipients are submittet to the template. Any ideas? _______________________________________________ dev-apps-bugzilla mailing list dev-apps-bugzilla at lists.mozilla.org https://lists.mozilla.org/listinfo/dev-apps-bugzilla From bbaetz at acm.org Tue Apr 15 20:57:22 2008 From: bbaetz at acm.org (Bradley Baetz) Date: Wed, 16 Apr 2008 06:57:22 +1000 Subject: Extensions and include paths In-Reply-To: <4804389E.7030502@bugzilla.org> References: <99435f5b0804141506q56c9694bib52bd5ec00bd52dc@mail.gmail.com> <20080414154430.0a78507b@es-compy> <4804389E.7030502@bugzilla.org> Message-ID: <99435f5b0804151357t7e887717qe678f895a3c12543@mail.gmail.com> On 15/04/2008, David Miller wrote: > This is why I had the "make plugins make sense" thing on the Google SoC > project list for 2007. I was wondering why nobody added it this year... Maybe I should have applied ;) (I would have /technically/ been eligible, I think) It sounds like noone objects to a cleanup. How tied are we to keeping the current interface? I won't have time to make all the changes (eg to an object), but the various include paths should be doable. Bradley From mkanat at bugzilla.org Tue Apr 15 22:11:07 2008 From: mkanat at bugzilla.org (Max Kanat-Alexander) Date: Tue, 15 Apr 2008 15:11:07 -0700 Subject: Extensions and include paths In-Reply-To: <99435f5b0804151357t7e887717qe678f895a3c12543@mail.gmail.com> References: <99435f5b0804141506q56c9694bib52bd5ec00bd52dc@mail.gmail.com> <20080414154430.0a78507b@es-compy> <4804389E.7030502@bugzilla.org> <99435f5b0804151357t7e887717qe678f895a3c12543@mail.gmail.com> Message-ID: <20080415151107.251efafa@es-compy> On Wed, 16 Apr 2008 06:57:22 +1000 "Bradley Baetz" wrote: > It sounds like noone objects to a cleanup. How tied are we to keeping > the current interface? I won't have time to make all the changes (eg > to an object), but the various include paths should be doable. I'm not that tied to it. As long as there's an easy migration path, I don't mind cleaning it up. -Max -- http://www.everythingsolved.com/ Competent, Friendly Bugzilla and Perl Services. Everything Else, too. From michael.j.tosh at lmco.com Wed Apr 16 12:12:42 2008 From: michael.j.tosh at lmco.com (Tosh, Michael J) Date: Wed, 16 Apr 2008 08:12:42 -0400 Subject: How can I access product name via bug id in template In-Reply-To: <724e3669-b7a2-4ab4-af02-f590e068aaf9@k10g2000prm.googlegroups.com> References: <3dea84aa-1066-488e-94e9-9d9f1205461d@8g2000hse.googlegroups.com> <724e3669-b7a2-4ab4-af02-f590e068aaf9@k10g2000prm.googlegroups.com> Message-ID: Quoting alx: > list/list.html.tmpl was just an example. > > I'd like to use the 'links' hook in bug/process/results.html.tmpl to > add a link to add an other bug for the last product, so that the user > isn't forced to go over 'choose product' again. The browsers back > button isn't the solution too, because the old form data is still > filled in. > > So, I can use 'id' but not via the bug object. > In process_bug.cgi it seems, that just the id, type and recipients are > submittet to the template. You will need to create a bug object and pull its product to pass to the form in process_bug.cgi. In Bugzilla 3.1.3, you won't need to create a bug_id to get the product name, but you will still need to modify process_bug.cgi to send that information to the template. You may want to include the entire bug object in $vars instead of just the piece you need (product) so that you can do stuff like this later with other information without more changes. _______________________________________________ dev-apps-bugzilla mailing list dev-apps-bugzilla at lists.mozilla.org https://lists.mozilla.org/listinfo/dev-apps-bugzilla From ghendricks at novell.com Wed Apr 16 16:23:00 2008 From: ghendricks at novell.com (Gregary Hendricks) Date: Wed, 16 Apr 2008 10:23:00 -0600 Subject: Extensions and include paths In-Reply-To: <4805D384020000D20001F756@lucius.provo.novell.com> References: <4804D3BE020000200001CAC9@lucius.provo.novell.com> <4805D384020000D20001F756@lucius.provo.novell.com> Message-ID: <4805D384020000D20001F756@lucius.provo.novell.com> On Tue, 2008-04-15 at 15:11 -0700, Max Kanat-Alexander wrote: > On Wed, 16 Apr 2008 06:57:22 +1000 "Bradley Baetz" > wrote: > > It sounds like noone objects to a cleanup. How tied are we to keeping > > the current interface? I won't have time to make all the changes (eg > > to an object), but the various include paths should be doable. > > I'm not that tied to it. As long as there's an easy migration > path, I don't mind cleaning it up. I am ok with this. I would appreciate time to test implications to Testopia before it lands though. Greg From mtheus at gmail.com Wed Apr 23 03:07:28 2008 From: mtheus at gmail.com (Matheus Bastos) Date: Wed, 23 Apr 2008 00:07:28 -0300 Subject: Google Summer of Code Project Message-ID: Hello, I am Matheus Bastos, student, and I will start in the Bugzilla project, in the Google Summer of Code 2008, to apply support do OpenID as an account login and Max Kanat-Alexander is my mentor in this journey. I am anxious to learn more about open projects. I hope make a good job. Regards, Matheus Bastos From burndonation at yahoo.com Mon Apr 28 16:43:11 2008 From: burndonation at yahoo.com (burndonation) Date: Mon, 28 Apr 2008 19:43:11 +0300 Subject: Help Me! Message-ID: He needs your help! http://www.freewebs.com/burndonation _______________________________________________ dev-apps-bugzilla mailing list dev-apps-bugzilla at lists.mozilla.org https://lists.mozilla.org/listinfo/dev-apps-bugzilla From ossipov at inf.fu-berlin.de Wed Apr 30 10:15:51 2008 From: ossipov at inf.fu-berlin.de (Michael Osipov) Date: Wed, 30 Apr 2008 12:15:51 +0200 Subject: Assuring Security by testing Message-ID: <481846D7.5010205@inf.fu-berlin.de> Hi devs, I've been investigating Bugzilla within my Bachelor's thesis "Application of security test tools in open source" at the Free University of Berlin (FU Berlin) [1]. Basically, I am looking for security measures which have been taken to prevent security leaks/vulnerabilities especially with security test tools which provide fuzzing capabilities for SQL injection, parameter tampering, path traversal etc. So far, I have searched the repository, the homepage, the wiki and the mailing list. Those resources revealed some very interesting information: 1. You do have a test suite [2] which works like a lint tool. 2. You require to run Perl in taint mode [3] 3. You do have a section on "secure" programming [4] 4. You claim you have "excellent security" [5] I am not trying to judge any of your statements, I am merely trying to reaveal some useful brackground information. Requiring perl's taint mode and filterting any input is a very good measure to keep out a lot of security issues but can you rely 100 % on it? No api or any develoer is as secure as 100 %. Additonally to this you are trying to design your system from the ground up with security in mind. The interesting point is that after going thru all these steps do you test the security measures by any security-dedicated test plan especially with security test tools? E.g., there are sql injections fuzzers, parameter fuzzers and so forth. Hope you can tell me what is going behind the scene. Thanks in advance, Michael [1] https://www.inf.fu-berlin.de/w/SE/ThesisFOSSSecurityTools [2] http://www.bugzilla.org/docs/developer.html#testsuite [3] http://www.bugzilla.org/docs/developer.html#perl-taint [4] http://www.bugzilla.org/docs/developer.html#security [5] http://www.bugzilla.org/features/#security -- OOXML - Say NO To Microsoft Office broken standard http://www.noooxml.org