From gerv at mozilla.org  Sat May  3 14:49:30 2008
From: gerv at mozilla.org (Gervase Markham)
Date: Sat, 03 May 2008 15:49:30 +0100
Subject: Assuring Security by testing
In-Reply-To: <481846D7.5010205@inf.fu-berlin.de>
References: <481846D7.5010205@inf.fu-berlin.de>
Message-ID: <481C7B7A.9090800@mozilla.org>

Michael Osipov wrote:
> 1. You do have a test suite [2] which works like a lint tool.

Not just that. It checks that every bit of data displayed in the 
templates is filtered using TT's FILTER command, and throws an error if 
it's not. There is an "exceptions" file but you specifically have to add 
your variable name, presumably after carefully checking that it's safe 
to do so.

It would be interesting to go back through the XSS holes which have been 
found since this system was created, and see why it didn't catch them.

> 4. You claim you have "excellent security" [5]

Here is our page of security advisories:
http://www.bugzilla.org/security/
Note that we regard privacy violations (information leakage) as security 
bugs, not just root-your-server bugs. For example, the most recent 
security advisory was one such.

Gerv


From lpsolit at gmail.com  Sun May  4 18:42:09 2008
From: lpsolit at gmail.com (=?UTF-8?B?RnLDqWTDqXJpYyBCdWNsaW4=?=)
Date: Sun, 04 May 2008 20:42:09 +0200
Subject: Assuring Security by testing
In-Reply-To: <481C7B7A.9090800@mozilla.org>
References: <481846D7.5010205@inf.fu-berlin.de> <481C7B7A.9090800@mozilla.org>
Message-ID: <481E0381.3040707@gmail.com>

Gervase Markham a ?crit :
> It would be interesting to go back through the XSS holes which have been 
> found since this system was created, and see why it didn't catch them.

Because some variables were added to filterexceptions.pl despite they 
were not safe (e.g. a variable assumed to be an integer but which is not 
always an integer).


From kristis.makris at asu.edu  Mon May  5 01:39:17 2008
From: kristis.makris at asu.edu (Kristis Makris)
Date: Sun, 04 May 2008 18:39:17 -0700
Subject: [scmbug-users] Re: SCMBUG and Bugzilla 3.1.3
In-Reply-To: <20080504215226.7u95ipkxkw08wggw@zeus.private>
References: <20080502114624.210080@gmx.net>
	 <1209749710.4106.5.camel@localhost>
	 <D6F6A284-D508-49BA-9147-BA24D95A5C20@mbtech-services.com>
	 <1209759702.4106.8.camel@localhost>
	 <1A9676B5-8609-41B7-9140-43C000997135@mbtech-services.com>
	 <20080504215226.7u95ipkxkw08wggw@zeus.private>
Message-ID: <1209951557.4062.7.camel@localhost>

Hi Bugzilla devs,

On Sun, 2008-05-04 at 21:52 +0200, Markus M. May wrote:
> After putting in some debug-statements, I get the follwoing errors:
> 
> Can't locate object method "dbh" via package "Bugzilla" at  
> /usr/share/perl5/Bugzilla/User.pm line 1664, <STDIN> line 34.
> 
> 
> These are now Bugzilla specific. I don't see any sense in this, since  
> I thought that /var/www/bugzilla31 is used ????

Scmbug calls at some point:

my $userid = Bugzilla::User::login_to_id( $username );

... but it does *not* call before that:

use Bugzilla;

Is this an error in User.pm ? Does User.pm expect the Bugzilla package
is loaded and is unable to find the Bugzilla::dbh() method because
Scmbug did not load Bugzilla.pm ?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://lists.bugzilla.org/pipermail/developers/attachments/20080504/1fd7aa2e/attachment.sig>

From lpsolit at gmail.com  Mon May  5 05:43:32 2008
From: lpsolit at gmail.com (=?UTF-8?B?RnLDqWTDqXJpYyBCdWNsaW4=?=)
Date: Mon, 05 May 2008 07:43:32 +0200
Subject: [scmbug-users] Re: SCMBUG and Bugzilla 3.1.3
In-Reply-To: <1209951557.4062.7.camel@localhost>
References: <20080502114624.210080@gmx.net>	 <1209749710.4106.5.camel@localhost>	 <D6F6A284-D508-49BA-9147-BA24D95A5C20@mbtech-services.com>	 <1209759702.4106.8.camel@localhost>	 <1A9676B5-8609-41B7-9140-43C000997135@mbtech-services.com>	 <20080504215226.7u95ipkxkw08wggw@zeus.private> <1209951557.4062.7.camel@localhost>
Message-ID: <481E9E84.5050203@gmail.com>

Kristis Makris a ?crit :
> Is this an error in User.pm ? Does User.pm expect the Bugzilla package
> is loaded 


Correct, Bugzilla.pm must be loaded before using User.pm. This applies 
to all Bugzilla modules. So this is not an error in User.pm.

LpSolit


From lpsolit at gmail.com  Mon May  5 23:04:50 2008
From: lpsolit at gmail.com (=?ISO-8859-1?Q?Fr=E9d=E9ric_Buclin?=)
Date: Tue, 06 May 2008 01:04:50 +0200
Subject: Bugzilla meeting on Tuesday, May 6 at 11:00 PDT (18:00 GMT, 20:00
 CEST)
Message-ID: <481F9292.6030304@gmail.com>

Hi all,

We will have a Bugzilla meeting tomorrow, Tuesday, May 6 at 11:00 PDT. 
This should be a short meeting about the remaining blockers for 3.2 RC1 
(you already know that 3.1.4 and 3.0.4 have been released, isn't it?). 
As usual, you are free to attend on IRC in the #bugzilla-meeting channel.

See you tomorrow,

LpSolit


From bugzilla at colinogilvie.co.uk  Tue May  6 06:45:37 2008
From: bugzilla at colinogilvie.co.uk (Colin Ogilvie)
Date: Tue, 06 May 2008 07:45:37 +0100
Subject: Bugzilla meeting on Tuesday, May 6 at 11:00 PDT (18:00 GMT, 20:00
 CEST)
In-Reply-To: <481F9292.6030304@gmail.com>
References: <481F9292.6030304@gmail.com>
Message-ID: <481FFE91.9090303@colinogilvie.co.uk>

Fr?d?ric Buclin wrote:
> We will have a Bugzilla meeting tomorrow, Tuesday, May 6 at 11:00 PDT. 
> This should be a short meeting about the remaining blockers for 3.2 
> RC1 (you already know that 3.1.4 and 3.0.4 have been released, isn't 
> it?). As usual, you are free to attend on IRC in the #bugzilla-meeting 
> channel.

What time is that in GMT?

Colin



From vladd at bugzilla.org  Tue May  6 06:50:23 2008
From: vladd at bugzilla.org (Vlad Dascalu)
Date: Tue, 6 May 2008 08:50:23 +0200
Subject: Bugzilla meeting on Tuesday, May 6 at 11:00 PDT (18:00 GMT, 20:00 CEST)
In-Reply-To: <481FFE91.9090303@colinogilvie.co.uk>
References: <481F9292.6030304@gmail.com> <481FFE91.9090303@colinogilvie.co.uk>
Message-ID: <a16d8c9b0805052350l747ee339ued1530da9dd9731b@mail.gmail.com>

It's written in the email's subject title.

>  What time is that in GMT?
>
>  Colin


From john at redux.org.uk  Tue May  6 09:14:07 2008
From: john at redux.org.uk (John Beranek)
Date: Tue, 06 May 2008 10:14:07 +0100
Subject: Bugzilla meeting on Tuesday, May 6 at 11:00 PDT (18:00 GMT, 20:00
 CEST)
In-Reply-To: <a16d8c9b0805052350l747ee339ued1530da9dd9731b@mail.gmail.com>
References: <481F9292.6030304@gmail.com> <481FFE91.9090303@colinogilvie.co.uk> <a16d8c9b0805052350l747ee339ued1530da9dd9731b@mail.gmail.com>
Message-ID: <4820215F.6060209@redux.org.uk>

Vlad Dascalu wrote:
> It's written in the email's subject title.

19:00 BST may be more applicable though... ;)

John.

-- 
John Beranek                         To generalise is to be an idiot.
http://redux.org.uk/                                 -- William Blake
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3331 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.bugzilla.org/pipermail/developers/attachments/20080506/f902bae9/attachment.bin>

From bugzilla at colinogilvie.co.uk  Tue May  6 10:54:16 2008
From: bugzilla at colinogilvie.co.uk (Colin Ogilvie)
Date: Tue, 06 May 2008 11:54:16 +0100
Subject: Bugzilla meeting on Tuesday, May 6 at 11:00 PDT (18:00 GMT, 20:00
 CEST)
In-Reply-To: <a16d8c9b0805052350l747ee339ued1530da9dd9731b@mail.gmail.com>
References: <481F9292.6030304@gmail.com> <481FFE91.9090303@colinogilvie.co.uk> <a16d8c9b0805052350l747ee339ued1530da9dd9731b@mail.gmail.com>
Message-ID: <482038D8.2090907@colinogilvie.co.uk>

Vlad Dascalu wrote:
> It's written in the email's subject title.
>   

Ah.

I didn't notice that as Thunderbird cut it off at the 'May 6 at' when I 
was looking this morning and it wasn't included in the body of the email 
either.

Colin


From guy.pyrzak at gmail.com  Tue May  6 16:10:16 2008
From: guy.pyrzak at gmail.com (Guy Pyrzak)
Date: Tue, 6 May 2008 09:10:16 -0700
Subject: Bugzilla meeting on Tuesday, May 6 at 11:00 PDT (18:00 GMT, 20:00 CEST)
In-Reply-To: <482038D8.2090907@colinogilvie.co.uk>
References: <481F9292.6030304@gmail.com> <481FFE91.9090303@colinogilvie.co.uk>
	 <a16d8c9b0805052350l747ee339ued1530da9dd9731b@mail.gmail.com>
	 <482038D8.2090907@colinogilvie.co.uk>
Message-ID: <df4dec6f0805060910w614d7a4er598768ac5a1fc829@mail.gmail.com>

I've got a dentist appointment :/. So I can't attend, unless you guys run
REALLY long.
-Guy

On Tue, May 6, 2008 at 3:54 AM, Colin Ogilvie <bugzilla at colinogilvie.co.uk>
wrote:

> Vlad Dascalu wrote:
>
> > It's written in the email's subject title.
> >
> >
>
> Ah.
>
> I didn't notice that as Thunderbird cut it off at the 'May 6 at' when I
> was looking this morning and it wasn't included in the body of the email
> either.
>
>
> Colin
> -
> To view or change your list settings, click here:
> <http://bugzilla.org/cgi-bin/mj_wwwusr?user=guy.pyrzak at gmail.com>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.bugzilla.org/pipermail/developers/attachments/20080506/b09d35d1/attachment.html>

From lpsolit at gmail.com  Tue May  6 16:19:21 2008
From: lpsolit at gmail.com (=?ISO-8859-1?Q?Fr=E9d=E9ric_Buclin?=)
Date: Tue, 06 May 2008 18:19:21 +0200
Subject: Bugzilla meeting on Tuesday, May 6 at 11:00 PDT (18:00 GMT, 20:00
 CEST)
In-Reply-To: <df4dec6f0805060910w614d7a4er598768ac5a1fc829@mail.gmail.com>
References: <481F9292.6030304@gmail.com> <481FFE91.9090303@colinogilvie.co.uk>	 <a16d8c9b0805052350l747ee339ued1530da9dd9731b@mail.gmail.com>	 <482038D8.2090907@colinogilvie.co.uk> <df4dec6f0805060910w614d7a4er598768ac5a1fc829@mail.gmail.com>
Message-ID: <48208509.6020209@gmail.com>

Guy Pyrzak a ?crit :
> I've got a dentist appointment :/. So I can't attend, unless you guys run
> REALLY long.

Your dentist has no Wifi? :)


From restarted.will at gmail.com  Thu May  8 22:30:05 2008
From: restarted.will at gmail.com (Will Power)
Date: Thu, 8 May 2008 16:30:05 -0600
Subject: Self-Introduction: Will Power
Message-ID: <48237f27.6105be0a.33a1.fffff99b@mx.google.com>

*	Full name is Will Power
*	No IRC nick at present, but can create one if needed
*	Currently located in Coaldale, CO, USA, but will soon move to
Portland, OR, USA
*	Currently disabled (bipolar) but have been in software development
for over 18 years professionally. Also am in Western Governors Univ,
completing a BS-Business with IT focus and then MBA-IT soon thereafter
*	No affiliation
*	I work well at all software levels, but am particularly skilled on
the UI and database (or equivalent) side. Also, I've done many projects with
refactoring or extension of functionality as well as one-off changes, and
can match to existing codebases very easily. Really, I'm looking to help in
whatever way is needed, and to keep my head in the technology side and stay
strong.
*	Historical qualifications

*	I've mostly done line-of-business applications, but being in
software dev as long as I have, I've worked with and built up utilities and
back-end/middleware systems too.
*	Mostly in the Microsoft camp (VB, VB.NET, C#), but have knowledge of
C and C++. Also I have worked with Java, but very little professionally.
*	I've been told that I cross the border between technology and
business very well. I've also enjoyed mentoring. A particular skill I have
is in gathering requirements and working out specification documentation and
other docs that a PM might do.

*	I hope I can be of help to this project!

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.bugzilla.org/pipermail/developers/attachments/20080508/0f6cd9bd/attachment.html>

From restarted.will at gmail.com  Fri May  9 02:31:12 2008
From: restarted.will at gmail.com (Will Power)
Date: Thu, 8 May 2008 20:31:12 -0600
Subject: Self-Introduction: Will Power
Message-ID: <4823b797.0405be0a.67bc.2896@mx.google.com>

Greetings. I've read through the Developer's Handbook, and see that the
primary technologies are Perl, databases, and HTML. I believe I can offer a
lot in the short term database-wise, and I can get back up to speed on Perl
from years past if there are smaller tasks that the dev team would like
worked on.

 

Will

 

From: Will Power [mailto:restarted.will at gmail.com] 
Sent: Thursday, May 08, 2008 4:30 PM
To: 'developers at bugzilla.org'
Subject: Self-Introduction: Will Power

 

*	Full name is Will Power
*	No IRC nick at present, but can create one if needed
*	Currently located in Coaldale, CO, USA, but will soon move to
Portland, OR, USA
*	Currently disabled (bipolar) but have been in software development
for over 18 years professionally. Also am in Western Governors Univ,
completing a BS-Business with IT focus and then MBA-IT soon thereafter
*	No affiliation
*	I work well at all software levels, but am particularly skilled on
the UI and database (or equivalent) side. Also, I've done many projects with
refactoring or extension of functionality as well as one-off changes, and
can match to existing codebases very easily. Really, I'm looking to help in
whatever way is needed, and to keep my head in the technology side and stay
strong.
*	Historical qualifications

*	I've mostly done line-of-business applications, but being in
software dev as long as I have, I've worked with and built up utilities and
back-end/middleware systems too.
*	Mostly in the Microsoft camp (VB, VB.NET, C#), but have knowledge of
C and C++. Also I have worked with Java, but very little professionally.
*	I've been told that I cross the border between technology and
business very well. I've also enjoyed mentoring. A particular skill I have
is in gathering requirements and working out specification documentation and
other docs that a PM might do.

*	I hope I can be of help to this project!

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.bugzilla.org/pipermail/developers/attachments/20080508/3fda0f49/attachment.html>

From |50 at 4sure.com  Mon May 12 19:49:19 2008
From: |50 at 4sure.com (Verna Rosado)
Date: Mon, 12 May 2008 21:49:19 +0200
Subject: S_p@m Filters new
Message-ID: <046903673.93026515028464@4sure.com>

 Good morning,baby!
========================
* *  Do you want to destroy the spyware that is lurking on your hard drive? 
^ ^  Would you like to restore the safety and security of your PC? 
   Then you need the protection 
***>>>             RECOMMENDED BY SECURITY EXPERTS
               http://geocities.com/BillieVang15?q=i3xToMmHK

========================


























be used for 216



_______________________________________________
dev-apps-bugzilla mailing list
dev-apps-bugzilla at lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-apps-bugzilla


From |1982 at antononline.net  Tue May 13 09:45:02 2008
From: |1982 at antononline.net (Joesph Ashley)
Date: Tue, 13 May 2008 10:45:02 +0100
Subject: malicious infections Filters best
Message-ID: <542401019.93801564148309@antononline.net>

 Beautiful night,officer!
=
&&&  Do you want to destroy the spyware that is lurking on your hard drive? 
<<  Would you like to restore the safety and security of your PC? 
^^^  Then you need the protection 
<<>>>             RECOMMENDED BY SECURITY EXPERTS
               http://geocities.com/MorganCooke99?q=RpdjQB

=


























Games and Entertainment 2



_______________________________________________
dev-apps-bugzilla mailing list
dev-apps-bugzilla at lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-apps-bugzilla


From jimderrico at gmail.com  Fri May 16 20:18:33 2008
From: jimderrico at gmail.com (jimderrico at gmail.com)
Date: Fri, 16 May 2008 13:18:33 -0700 (PDT)
Subject: Restrict userselect.html.tmpl to Group editbugs?
Message-ID: <74f1656a-6151-455e-9fbd-eb4b894c2b51@m3g2000hsc.googlegroups.com>

Hi,
Running 3.0 on Linux RH Enterprise 4
I am looking at global/userselect.html.tmpl and I would like to limit
the choices for assign_to (and maybe cc) to just users in the editbugs
Group. It currently lists all users for assign_to with:
[% FOREACH tmpuser = user.get_userlist %]

I could either use a way to generate a different list, something like
user.get_grouplist(editbugs)
or some way to filter the full user list further down with something
like [% IF tmpuser.in_group('editbugs') %]

I'm not sure what user.get_userlist returns (other than a hash) and/or
how to apply it to find out if the value in the FOREACH loop is in a
particular Group.

Any thoughts?
Thanks,
jim
_______________________________________________
dev-apps-bugzilla mailing list
dev-apps-bugzilla at lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-apps-bugzilla


From gerv at mozilla.org  Sat May 17 14:27:02 2008
From: gerv at mozilla.org (Gervase Markham)
Date: Sat, 17 May 2008 15:27:02 +0100
Subject: Distributed Bug Tracking
Message-ID: <4Iudnfee3MirdrPVnZ2dnUVZ_jWdnZ2d@mozilla.org>

LWN this week has an interesting article on Distributed Bug Tracking, 
and new projects in that area:
http://lwn.net/SubscriberLink/281849/e25133be8aa408ef/

(Their journalism is generally this good; do consider subscribing. It's 
only $60 US per year at "professional hacker" level, or half that at 
"starving hacker".)

Should Bugzilla be moving in a direction which makes it more 
distributed? Or are offline storage clients the right solution to the 
"guy on a plane" problem?

Gerv
_______________________________________________
dev-apps-bugzilla mailing list
dev-apps-bugzilla at lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-apps-bugzilla


From lpsolit at gmail.com  Sat May 17 16:13:30 2008
From: lpsolit at gmail.com (=?ISO-8859-1?Q?Fr=E9d=E9ric_Buclin?=)
Date: Sat, 17 May 2008 18:13:30 +0200
Subject: Bugzilla meeting next Tuesday, May 20 at 11:00 PDT (18:00 GMT, 20:00
 CEST)
Message-ID: <482F042A.3020306@gmail.com>

Hi all,

Our next Bugzilla meeting will take place next Tuesday, May 20 at 11:00 
PDT (18:00 GMT, 20:00 CEST) on IRC in the #bugzilla-meeting channel. 
This will be an important meeting as we are going to discuss and 
validate the roadmap for Bugzilla 4.0, our next milestone. The current 
draft of the roadmap is available here: 
http://wiki.mozilla.org/Bugzilla:Roadmap#Our_priorities

If you think we are missing an important feature, or if you want to 
actively contribute in implementing one (the more active contributors we 
have, and the more likely a feature will be ready on time for 4.0), do 
not hesitate to join the meeting on Tuesday; everyone is welcome.

Please note that this is still a draft, which hasn't been validated yet! 
This means that we may add or remove one or several tasks from the 
roadmap during the meeting. So do not tell everyone that such or such 
feature *will* be available in Bugzilla 4.0 because it's listed in the 
roadmap, but that it *may* be in Bugzilla 4.0 (we may even remove some 
tasks in some months if we realize that we made not enough progress on 
them).

See you on Tuesday,

LpSolit


From justdave at bugzilla.org  Sat May 17 16:47:59 2008
From: justdave at bugzilla.org (David Miller)
Date: Sat, 17 May 2008 12:47:59 -0400
Subject: Distributed Bug Tracking
In-Reply-To: <4Iudnfee3MirdrPVnZ2dnUVZ_jWdnZ2d@mozilla.org>
References: <4Iudnfee3MirdrPVnZ2dnUVZ_jWdnZ2d@mozilla.org>
Message-ID: <482F0C3F.7080602@bugzilla.org>

Gervase Markham wrote on 5/17/08 10:27 AM:

> Should Bugzilla be moving in a direction which makes it more
> distributed? Or are offline storage clients the right solution to the
> "guy on a plane" problem?

What would be cool is some sort of encapsulation format for a bug with a 
"track changes" capability.  So that you have kind of an activity log 
type thing for the changes you've made to your local copy of the bug. 
Then when you get back online, you can upload that to Bugzilla and it'll 
apply those changes making sure you haven't conflicted with anything else.

-- 
Dave Miller                                   http://www.justdave.net/
System Administrator, Mozilla Corporation      http://www.mozilla.com/
Project Leader, Bugzilla Bug Tracking System  http://www.bugzilla.org/


From justdave at bugzilla.org  Sat May 17 16:51:18 2008
From: justdave at bugzilla.org (David Miller)
Date: Sat, 17 May 2008 12:51:18 -0400
Subject: Distributed Bug Tracking
In-Reply-To: <482F0C3F.7080602@bugzilla.org>
References: <4Iudnfee3MirdrPVnZ2dnUVZ_jWdnZ2d@mozilla.org> <482F0C3F.7080602@bugzilla.org>
Message-ID: <482F0D06.5010302@bugzilla.org>

David Miller wrote on 5/17/08 12:47 PM:
> Gervase Markham wrote on 5/17/08 10:27 AM:
>
>> Should Bugzilla be moving in a direction which makes it more
>> distributed? Or are offline storage clients the right solution to the
>> "guy on a plane" problem?
>
> What would be cool is some sort of encapsulation format for a bug with a
> "track changes" capability. So that you have kind of an activity log
> type thing for the changes you've made to your local copy of the bug.
> Then when you get back online, you can upload that to Bugzilla and it'll
> apply those changes making sure you haven't conflicted with anything else.

I see the article doesn't mention Deskzilla either, which does have an 
offline mode that works halfway decent (when it doesn't run out of 
memory anyway).

-- 
Dave Miller                                   http://www.justdave.net/
System Administrator, Mozilla Corporation      http://www.mozilla.com/
Project Leader, Bugzilla Bug Tracking System  http://www.bugzilla.org/


From guy.pyrzak at gmail.com  Sat May 17 17:46:42 2008
From: guy.pyrzak at gmail.com (Guy Pyrzak)
Date: Sat, 17 May 2008 10:46:42 -0700
Subject: Distributed Bug Tracking
In-Reply-To: <482F0D06.5010302@bugzilla.org>
References: <4Iudnfee3MirdrPVnZ2dnUVZ_jWdnZ2d@mozilla.org>
	 <482F0C3F.7080602@bugzilla.org> <482F0D06.5010302@bugzilla.org>
Message-ID: <df4dec6f0805171046l47082a2ax66fa21c9f100694d@mail.gmail.com>

Google Gears (http://gears.google.com/) + Bugzilla.... need i say more?

-Guy

On Sat, May 17, 2008 at 9:51 AM, David Miller <justdave at bugzilla.org> wrote:
> David Miller wrote on 5/17/08 12:47 PM:
>>
>> Gervase Markham wrote on 5/17/08 10:27 AM:
>>
>>> Should Bugzilla be moving in a direction which makes it more
>>> distributed? Or are offline storage clients the right solution to the
>>> "guy on a plane" problem?
>>
>> What would be cool is some sort of encapsulation format for a bug with a
>> "track changes" capability. So that you have kind of an activity log
>> type thing for the changes you've made to your local copy of the bug.
>> Then when you get back online, you can upload that to Bugzilla and it'll
>> apply those changes making sure you haven't conflicted with anything else.
>
> I see the article doesn't mention Deskzilla either, which does have an
> offline mode that works halfway decent (when it doesn't run out of memory
> anyway).
>
> --
> Dave Miller                                   http://www.justdave.net/
> System Administrator, Mozilla Corporation      http://www.mozilla.com/
> Project Leader, Bugzilla Bug Tracking System  http://www.bugzilla.org/
> -
> To view or change your list settings, click here:
> <http://bugzilla.org/cgi-bin/mj_wwwusr?user=guy.pyrzak at gmail.com>
>


From mkanat at bugzilla.org  Sat May 17 22:35:48 2008
From: mkanat at bugzilla.org (Max Kanat-Alexander)
Date: Sat, 17 May 2008 15:35:48 -0700
Subject: Distributed Bug Tracking
In-Reply-To: <df4dec6f0805171046l47082a2ax66fa21c9f100694d@mail.gmail.com>
References: <4Iudnfee3MirdrPVnZ2dnUVZ_jWdnZ2d@mozilla.org>
	<482F0C3F.7080602@bugzilla.org>
	<482F0D06.5010302@bugzilla.org>
	<df4dec6f0805171046l47082a2ax66fa21c9f100694d@mail.gmail.com>
Message-ID: <20080517153548.4151e076@es-compy>

On Sat, 17 May 2008 10:46:42 -0700 "Guy Pyrzak" <guy.pyrzak at gmail.com>
wrote:
> Google Gears (http://gears.google.com/) + Bugzilla.... need i say
> more?

	Yeah, that would probably do it, or something like it.

	Basically what we'd want is some add-on or wrapper for Bugzilla,
not something that modifies core Bugzilla itself, I think.

	-Max
-- 
http://www.everythingsolved.com/
Competent, Friendly Bugzilla and Perl Services. Everything Else, too.


From mbd at dbc.dk  Mon May 19 06:54:18 2008
From: mbd at dbc.dk (Mads Bondo Dydensborg)
Date: Mon, 19 May 2008 08:54:18 +0200
Subject: Distributed Bug Tracking
In-Reply-To: <20080517153548.4151e076@es-compy>
References: <4Iudnfee3MirdrPVnZ2dnUVZ_jWdnZ2d@mozilla.org> <df4dec6f0805171046l47082a2ax66fa21c9f100694d@mail.gmail.com> <20080517153548.4151e076@es-compy>
Message-ID: <200805190854.18211.mbd@dbc.dk>

s?ndag 18 Maj 2008 skrev Max Kanat-Alexander:
> On Sat, 17 May 2008 10:46:42 -0700 "Guy Pyrzak" <guy.pyrzak at gmail.com>
> wrote:
> > Google Gears (http://gears.google.com/) + Bugzilla.... need i say
> > more?
> 
> 	Yeah, that would probably do it, or something like it.
> 
> 	Basically what we'd want is some add-on or wrapper for Bugzilla,
> not something that modifies core Bugzilla itself, I think.

My 2 cents: if the webservice part of Bugzilla was fully developed, one could 
e.g. record actions while offline and play them back to bugzilla, when 
connected. (For the limited set of actions, where it makes sense).

Regards

Mads

-- 
Med venlig hilsen/Regards

Systemudvikler/Systemsdeveloper cand.scient.dat, Ph.d., Mads Bondo Dydensborg
Dansk BiblioteksCenter A/S, Tempovej 7-11, 2750 Ballerup, Tlf. +45 44 86 77 34



From michael.j.tosh at lmco.com  Mon May 19 13:26:05 2008
From: michael.j.tosh at lmco.com (Tosh, Michael J)
Date: Mon, 19 May 2008 09:26:05 -0400
Subject: Restrict userselect.html.tmpl to Group editbugs?
In-Reply-To: <74f1656a-6151-455e-9fbd-eb4b894c2b51@m3g2000hsc.googlegroups.com>
References: <74f1656a-6151-455e-9fbd-eb4b894c2b51@m3g2000hsc.googlegroups.com>
Message-ID: <FDB5599B9D4E934C8CFA6C9097D4C9F10CBED423@emss10m05.us.lmco.com>

I added the following sub to Bugzilla/Group.pm.  I will return a group
of user objects that are direct or inherited to a given group.  THIS
DOES NOT RESPECT STRICTISOLATION!!!  It is just a hack for myself.  If
you don't use strict isolation, you can use this sub to pass a hash of
user objects to the userselect.html.tmpl template.

sub members_inherited {
    my ($self) = @_;
    return $self->{members_inherited}
           if exists $self->{members_inherited};

    require Bugzilla::User;
    my $sql = 'SELECT DISTINCT user_id AS user_id FROM user_group_map
          WHERE isbless = 0 AND group_id IN(' .
 
join(',',@{Bugzilla::User->flatten_group_membership($self->id)}) .
          ')';
    my $in_member_ids = Bugzilla->dbh->selectcol_arrayref($sql,undef) ||
[];
    $self->{members_inherited} =
Bugzilla::User->new_from_list($in_member_ids);
    return $self->{members_inherited};
}

 

-----Original Message-----
From: dev-apps-bugzilla-bounces at lists.mozilla.org
[mailto:dev-apps-bugzilla-bounces at lists.mozilla.org] On Behalf Of
jimderrico at gmail.com
Sent: Friday, May 16, 2008 4:19 PM
To: dev-apps-bugzilla at lists.mozilla.org
Subject: Restrict userselect.html.tmpl to Group editbugs?

Hi,
Running 3.0 on Linux RH Enterprise 4
I am looking at global/userselect.html.tmpl and I would like to limit
the choices for assign_to (and maybe cc) to just users in the editbugs
Group. It currently lists all users for assign_to with:
[% FOREACH tmpuser = user.get_userlist %]

I could either use a way to generate a different list, something like
user.get_grouplist(editbugs)
or some way to filter the full user list further down with something
like [% IF tmpuser.in_group('editbugs') %]

I'm not sure what user.get_userlist returns (other than a hash) and/or
how to apply it to find out if the value in the FOREACH loop is in a
particular Group.

Any thoughts?
Thanks,
jim
_______________________________________________
dev-apps-bugzilla mailing list
dev-apps-bugzilla at lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-apps-bugzilla
_______________________________________________
dev-apps-bugzilla mailing list
dev-apps-bugzilla at lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-apps-bugzilla


From fedrushkov at users.sourceforge.net  Tue May 20 17:58:36 2008
From: fedrushkov at users.sourceforge.net (Vitaly Fedrushkov)
Date: Tue, 20 May 2008 23:58:36 +0600
Subject: Distributed Bug Tracking
In-Reply-To: <4Iudnfee3MirdrPVnZ2dnUVZ_jWdnZ2d@mozilla.org>
References: <4Iudnfee3MirdrPVnZ2dnUVZ_jWdnZ2d@mozilla.org>
Message-ID: <4833114C.4060208@users.sourceforge.net>

> Should Bugzilla be moving in a direction which makes it more 
> distributed? Or are offline storage clients the right solution to the 
> "guy on a plane" problem?

IMHO there are other orthogonal technologies which make this possible. 
I use Nokia 9500, and I'll tell you if/when Bugzilla will get too 
bloated to fit there :-)))

In distributed development, only good code -- something really worth 
sharing -- gets shared.

In bug/problem tracking knowledge sharing is many times more essential: 
as ESR put it, debugging and peer review DOES scale well.  It is a bug 
tracker which makes this scaling possible, and in contrast to SCMs, 
_anything_ is worth sharing.

To get a picture of two different processes: compare total number of 
patches in b.m.o to number of patches actually committed.

   Regards,
   Vitaly.
_______________________________________________
dev-apps-bugzilla mailing list
dev-apps-bugzilla at lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-apps-bugzilla


From mkanat at bugzilla.org  Tue May 20 19:05:27 2008
From: mkanat at bugzilla.org (Max Kanat-Alexander)
Date: Tue, 20 May 2008 12:05:27 -0700
Subject: Created BUGZILLA-3_2-BRANCH
Message-ID: <20080520120527.224fd534@es-lappy>

	Hey folks. I branched today. The new branch is
BUGZILLA-3_2-BRANCH. Checkins to this branch require approval3.2+ to be
set.

	approval+ now means trunk, not 3.2.

	All of the other stuff that surrounds branch creation (like new
tinderboxen, etc.) is coming soon.

	-Max


From gerv at mozilla.org  Tue May 20 21:53:53 2008
From: gerv at mozilla.org (Gervase Markham)
Date: Tue, 20 May 2008 22:53:53 +0100
Subject: Distributed Bug Tracking
In-Reply-To: <df4dec6f0805171046l47082a2ax66fa21c9f100694d@mail.gmail.com>
References: <4Iudnfee3MirdrPVnZ2dnUVZ_jWdnZ2d@mozilla.org>	 <482F0C3F.7080602@bugzilla.org> <482F0D06.5010302@bugzilla.org> <df4dec6f0805171046l47082a2ax66fa21c9f100694d@mail.gmail.com>
Message-ID: <48334871.4010003@mozilla.org>

Guy Pyrzak wrote:
> Google Gears (http://gears.google.com/) + Bugzilla.... need i say more?

Well yeah :-) If we were going to do an offline HTML app version of 
Bugzilla, we'd do it using the new WHAT-WG offline stuff supported in 
Firefox 3. Right? :-)

Gerv


From lpsolit at gmail.com  Tue May 20 21:55:57 2008
From: lpsolit at gmail.com (=?ISO-8859-1?Q?Fr=E9d=E9ric_Buclin?=)
Date: Tue, 20 May 2008 23:55:57 +0200
Subject: Roadmap for Bugzilla 4.0
Message-ID: <483348ED.7030801@gmail.com>

Hi all,

The roadmap for Bugzilla 4.0 has been validated earlier today during our 
Bugzilla meeting. You can see the result here:

http://wiki.mozilla.org/Bugzilla:Roadmap#The_Roadmap

The freezing date for 4.0 is January 11, 2009.

Those of you who upgrade their installation using CVS will now see 
Bugzilla 3.3 as the new dev version (trunk). It will become 4.0 when 
it's ready.

LpSolit


From zach at zachlipton.com  Tue May 20 22:46:34 2008
From: zach at zachlipton.com (Zach Lipton)
Date: Tue, 20 May 2008 15:46:34 -0700
Subject: Distributed Bug Tracking
In-Reply-To: <48334871.4010003@mozilla.org>
References: <4Iudnfee3MirdrPVnZ2dnUVZ_jWdnZ2d@mozilla.org>	 <482F0C3F.7080602@bugzilla.org> <482F0D06.5010302@bugzilla.org> <df4dec6f0805171046l47082a2ax66fa21c9f100694d@mail.gmail.com> <48334871.4010003@mozilla.org>
Message-ID: <9C949EF4-AEE7-4770-8F02-1B3D2FA6D6E7@zachlipton.com>

On May 20, 2008, at 2:53 PM, Gervase Markham wrote:
> Guy Pyrzak wrote:
>> Google Gears (http://gears.google.com/) + Bugzilla.... need i say  
>> more?
>
> Well yeah :-) If we were going to do an offline HTML app version of  
> Bugzilla, we'd do it using the new WHAT-WG offline stuff supported  
> in Firefox 3. Right? :-)
>
Of course! I actually spent some time the other day playing around  
with what an offline version of Bugzilla would look like, using the  
WHATWG application cache and app storage objects in Firefox 3.  
Currently, it's blocked by the lack of support in Firefox for fallback  
cache entries (they were added to the spec after the feature freeze),  
which means that we can't yet handle offline requests for pages with  
query strings (e.g. show_bug.cgi?id=5 is considered a completely  
separate page from show_bug.cgi?id=6). Dave Camp tells me that this  
will get fixed in nightlies sooner rather than later, and once that  
happens I will certainly post a proof of concept up on landfill for  
everyone to play with.

Besides this one issue, it actually turns out to be pretty simple to  
allow for offline storage/editing of bugs, particularly since we  
already have the collision detection code to help with  
synchronization. Obviously, we can't implement everything offline, but  
we can certainly cache bug data and allow users to save a query's  
worth of bugs for later offline use and permit editing, with the  
results later sync'd back to the server. Not sure, however, if  
uploading is feasible without a Firefox-only hack, as the security  
model is obviously rather strict about filesystem access. On the other  
hand, you can't generate a cvs diff offline anyway, so I'm not sure if  
uploading is really that useful.

--zach


From jochen.wiedmann at gmail.com  Wed May 21 06:00:08 2008
From: jochen.wiedmann at gmail.com (Jochen Wiedmann)
Date: Wed, 21 May 2008 08:00:08 +0200
Subject: Roadmap for Bugzilla 4.0
In-Reply-To: <483348ED.7030801@gmail.com>
References: <483348ED.7030801@gmail.com>
Message-ID: <e75283b10805202300t6d111b7bp370a12d3f77d3c98@mail.gmail.com>

On Tue, May 20, 2008 at 11:55 PM, Fr?d?ric Buclin <lpsolit at gmail.com> wrote:

> The roadmap for Bugzilla 4.0 has been validated earlier today during our

Why the version number? By looking at the road map, my impression is
that this will be more of a minor than a major release?

Jochen


-- 
Look, that's why there's rules, understand? So that you think before
you break 'em.

 -- (Terry Pratchett, Thief of Time)


From mkanat at bugzilla.org  Wed May 21 06:38:21 2008
From: mkanat at bugzilla.org (Max Kanat-Alexander)
Date: Tue, 20 May 2008 23:38:21 -0700
Subject: Roadmap for Bugzilla 4.0
In-Reply-To: <e75283b10805202300t6d111b7bp370a12d3f77d3c98@mail.gmail.com>
References: <483348ED.7030801@gmail.com>
	<e75283b10805202300t6d111b7bp370a12d3f77d3c98@mail.gmail.com>
Message-ID: <20080520233821.6b9ba51d@es-compy>

On Wed, 21 May 2008 08:00:08 +0200 "Jochen Wiedmann"
<jochen.wiedmann at gmail.com> wrote:
> Why the version number? By looking at the road map, my impression is
> that this will be more of a minor than a major release?

	Compared to 3.0, it'll be pretty major! :-) Also, a lot of
those features are pretty big.

	-Max
-- 
http://www.everythingsolved.com/
Competent, Friendly Bugzilla and Perl Services. Everything Else, too.


From jochen.wiedmann at gmail.com  Wed May 21 08:06:29 2008
From: jochen.wiedmann at gmail.com (Jochen Wiedmann)
Date: Wed, 21 May 2008 10:06:29 +0200
Subject: Roadmap for Bugzilla 4.0
In-Reply-To: <20080520233821.6b9ba51d@es-compy>
References: <483348ED.7030801@gmail.com>
	 <e75283b10805202300t6d111b7bp370a12d3f77d3c98@mail.gmail.com>
	 <20080520233821.6b9ba51d@es-compy>
Message-ID: <e75283b10805210106v22ae6a3br1e63085fa849694f@mail.gmail.com>

On Wed, May 21, 2008 at 8:38 AM, Max Kanat-Alexander
<mkanat at bugzilla.org> wrote:

>        Compared to 3.0, it'll be pretty major! :-) Also, a lot of
> those features are pretty big.

Ok, understood. But from what I can tell, the changes are mainly
"underground" and not on the UI level. I suppose that users would
expect more when reading the version number.


-- 
Look, that's why there's rules, understand? So that you think before
you break 'em.

 -- (Terry Pratchett, Thief of Time)


From mkanat at bugzilla.org  Wed May 21 08:21:16 2008
From: mkanat at bugzilla.org (Max Kanat-Alexander)
Date: Wed, 21 May 2008 01:21:16 -0700
Subject: Roadmap for Bugzilla 4.0
In-Reply-To: <e75283b10805210106v22ae6a3br1e63085fa849694f@mail.gmail.com>
References: <483348ED.7030801@gmail.com>
	<e75283b10805202300t6d111b7bp370a12d3f77d3c98@mail.gmail.com>
	<20080520233821.6b9ba51d@es-compy>
	<e75283b10805210106v22ae6a3br1e63085fa849694f@mail.gmail.com>
Message-ID: <20080521012116.5473e355@es-compy>

On Wed, 21 May 2008 10:06:29 +0200 "Jochen Wiedmann"
<jochen.wiedmann at gmail.com> wrote:
> Ok, understood. But from what I can tell, the changes are mainly
> "underground" and not on the UI level. I suppose that users would
> expect more when reading the version number.

	I think there will be enough UI changes that people will
notice. There will be some UI stuff that isn't mentioned in the
roadmap, too, like the "simple bug entry" page.

	-Max
-- 
http://www.everythingsolved.com/
Competent, Friendly Bugzilla and Perl Services. Everything Else, too.


From lpsolit at gmail.com  Wed May 21 12:02:11 2008
From: lpsolit at gmail.com (=?ISO-8859-1?Q?Fr=E9d=E9ric_Buclin?=)
Date: Wed, 21 May 2008 14:02:11 +0200
Subject: Roadmap for Bugzilla 4.0
In-Reply-To: <e75283b10805210106v22ae6a3br1e63085fa849694f@mail.gmail.com>
References: <483348ED.7030801@gmail.com>	 <e75283b10805202300t6d111b7bp370a12d3f77d3c98@mail.gmail.com>	 <20080520233821.6b9ba51d@es-compy> <e75283b10805210106v22ae6a3br1e63085fa849694f@mail.gmail.com>
Message-ID: <48340F43.10503@gmail.com>

Jochen Wiedmann a ?crit :
> Ok, understood. But from what I can tell, the changes are mainly
> "underground" and not on the UI level.

I think it's wrong to look at UI changes to say it worths a major 
revision number or not. More important is what Bugzilla can do, not how 
many CSS changes we made between 3.0 and 4.0.

LpSolit


From guy.pyrzak at gmail.com  Wed May 21 21:38:59 2008
From: guy.pyrzak at gmail.com (Guy Pyrzak)
Date: Wed, 21 May 2008 14:38:59 -0700
Subject: Roadmap for Bugzilla 4.0
In-Reply-To: <48340F43.10503@gmail.com>
References: <483348ED.7030801@gmail.com>
	 <e75283b10805202300t6d111b7bp370a12d3f77d3c98@mail.gmail.com>
	 <20080520233821.6b9ba51d@es-compy>
	 <e75283b10805210106v22ae6a3br1e63085fa849694f@mail.gmail.com>
	 <48340F43.10503@gmail.com>
Message-ID: <df4dec6f0805211438y307501ffpfe962cf066c53092@mail.gmail.com>

For 3.2 we completely re-did editbugs (which is a minor change for a
major UI change), one of the most used pages in Bugzilla. In the next
version we're going to redo the homepage and parts of the advanced
search page (ajaxy narrowing), possible the search results page, and
streamlining the new page/edit page.

There are also a few smaller UI tweaks such as the saved searches,
Graphic reports widget, Admin links etc.

But lastly I totally agree with LpSolit, a totally new UI isn't
necessary for a version change, see Adobe products and microsoft
products.

And lastly, if you've got any UI changes that you'd like to see let me
know, I'm pretty sure a useful homepage and AJAX/YUI throughout
Bugzilla will get many of the UI changes you are looking for.

-Guy

On Wed, May 21, 2008 at 5:02 AM, Fr?d?ric Buclin <lpsolit at gmail.com> wrote:
> Jochen Wiedmann a ?crit :
>>
>> Ok, understood. But from what I can tell, the changes are mainly
>> "underground" and not on the UI level.
>
> I think it's wrong to look at UI changes to say it worths a major revision
> number or not. More important is what Bugzilla can do, not how many CSS
> changes we made between 3.0 and 4.0.
>
> LpSolit
> -
> To view or change your list settings, click here:
> <http://bugzilla.org/cgi-bin/mj_wwwusr?user=guy.pyrzak at gmail.com>
>


From gerv at mozilla.org  Thu May 22 10:57:45 2008
From: gerv at mozilla.org (Gervase Markham)
Date: Thu, 22 May 2008 11:57:45 +0100
Subject: Distributed Bug Tracking
In-Reply-To: <9C949EF4-AEE7-4770-8F02-1B3D2FA6D6E7@zachlipton.com>
References: <4Iudnfee3MirdrPVnZ2dnUVZ_jWdnZ2d@mozilla.org>	 <482F0C3F.7080602@bugzilla.org> <482F0D06.5010302@bugzilla.org> <df4dec6f0805171046l47082a2ax66fa21c9f100694d@mail.gmail.com> <48334871.4010003@mozilla.org> <9C949EF4-AEE7-4770-8F02-1B3D2FA6D6E7@zachlipton.com>
Message-ID: <483551A9.4040801@mozilla.org>

Zach Lipton wrote:
> Not sure, however, if uploading is feasible without a
> Firefox-only hack, as the security model is obviously rather strict
> about filesystem access. On the other hand, you can't generate a cvs
> diff offline anyway, so I'm not sure if uploading is really that useful.

You can with hg :-) Still, if this is the only thing that doesn't work, 
then that's pretty good. I look forward to trying out your work :-)

Gerv


From restarted.will at gmail.com  Thu May  8 22:30:05 2008
From: restarted.will at gmail.com (Will Power)
Date: Thu, 8 May 2008 16:30:05 -0600
Subject: Self-Introduction: Will Power
Message-ID: <48237f27.6105be0a.33a1.fffff99b@mx.google.com>

*	Full name is Will Power
*	No IRC nick at present, but can create one if needed
*	Currently located in Coaldale, CO, USA, but will soon move to
Portland, OR, USA
*	Currently disabled (bipolar) but have been in software development
for over 18 years professionally. Also am in Western Governors Univ,
completing a BS-Business with IT focus and then MBA-IT soon thereafter
*	No affiliation
*	I work well at all software levels, but am particularly skilled on
the UI and database (or equivalent) side. Also, I've done many projects with
refactoring or extension of functionality as well as one-off changes, and
can match to existing codebases very easily. Really, I'm looking to help in
whatever way is needed, and to keep my head in the technology side and stay
strong.
*	Historical qualifications

*	I've mostly done line-of-business applications, but being in
software dev as long as I have, I've worked with and built up utilities and
back-end/middleware systems too.
*	Mostly in the Microsoft camp (VB, VB.NET, C#), but have knowledge of
C and C++. Also I have worked with Java, but very little professionally.
*	I've been told that I cross the border between technology and
business very well. I've also enjoyed mentoring. A particular skill I have
is in gathering requirements and working out specification documentation and
other docs that a PM might do.

*	I hope I can be of help to this project!

 

_______________________________________________
dev-apps-bugzilla mailing list
dev-apps-bugzilla at lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-apps-bugzilla