10 Feb
2010
10 Feb
'10
1:26 a.m.
Hello,
How can I specify a security level mentioned in JIRA help
(http://jira.xwiki.org/jira/secure/ShowConstantsHelp.jspa#IssueTypes)
for a new issue?
Regards,
Alex Busenius
10 Feb
10 Feb
9:37 a.m.
On Wed, Feb 10, 2010 at 01:26, Alex Busenius <the_unknown(a)gmx.net> wrote:
Hello,
How can I specify a security level mentioned in JIRA help
(http://jira.xwiki.org/jira/secure/ShowConstantsHelp.jspa#IssueTypes)
for a new issue?
Maybe you can't specify the security level because you would not have
the right to see it (not 100% sure about that but it make sense since
i see it when I create an issue).
Regards,
Alex Busenius
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
--
Thomas Mortagne
11:46 a.m.
Hi Alex,
On Wed, Feb 10, 2010 at 1:26 AM, Alex Busenius <the_unknown(a)gmx.net> wrote:
Hello,
How can I specify a security level mentioned in JIRA help
(http://jira.xwiki.org/jira/secure/ShowConstantsHelp.jspa#IssueTypes)
for a new issue?
I think you need to create the issue, save it and then edit it again since
the first issue creation screen doesn't display the security level IIRC.
Guillaume
Regards,
Alex Busenius
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
--
Guillaume Lerouge
Product Manager - XWiki SAS
Skype: wikibc
Twitter: glerouge
http://guillaumelerouge.com/
12:09 p.m.
Hi Guillaume,
On 02/10/2010 11:46 AM, Guillaume Lerouge wrote:
Hi Alex,
On Wed, Feb 10, 2010 at 1:26 AM, Alex Busenius <the_unknown(a)gmx.net> wrote:
Thank you for the hint, but I still can't change the security level
there. The only thing that comes close to it is the "Viewable By" field,
but the dropdown box only allows me to choose between "All Users",
"Users" or "jira-users".
Is there any other established way to report security bugs for xwiki?
I'd like to report several XSS/CSRF vulnerabilities and do not want
everybody to see the details before they are fixed.
Regards,
Alex
Hello,
How can I specify a security level mentioned in JIRA help
(http://jira.xwiki.org/jira/secure/ShowConstantsHelp.jspa#IssueTypes)
for a new issue?
I think you need to create the issue, save it and then edit it again since
the first issue creation screen doesn't display the security level IIRC.
Guillaume
Regards,
Alex Busenius
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
12:14 p.m.
On 2/10/10 11:46 AM, Guillaume Lerouge wrote:
Hi Alex,
On Wed, Feb 10, 2010 at 1:26 AM, Alex Busenius<the_unknown(a)gmx.net> wrote:
That would not make much sense, since notifications emails are sent upon
issue creation.
From what I recall the field name is not "security" but
"confidentiality".
Jerome.
Hello,
How can I specify a security level mentioned in JIRA help
(http://jira.xwiki.org/jira/secure/ShowConstantsHelp.jspa#IssueTypes)
for a new issue?
I think you need to create the issue, save it and then edit it again since
the first issue creation screen doesn't display the security level IIRC.
Guillaume
Regards,
Alex Busenius
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
12:17 p.m.
Hi Alex,
On Feb 10, 2010, at 12:09 PM, Alex Busenius wrote:
Hi Guillaume,
On 02/10/2010 11:46 AM, Guillaume Lerouge wrote:
Thanks for that. I've just given you the right on jira so all should be ok now. Can
you verify?
Thanks
-Vincent
Hi Alex,
On Wed, Feb 10, 2010 at 1:26 AM, Alex Busenius <the_unknown(a)gmx.net> wrote:
Thank you for the hint, but I still can't change the security level
there. The only thing that comes close to it is the "Viewable By" field,
but the dropdown box only allows me to choose between "All Users",
"Users" or "jira-users".
Is there any other established way to report security bugs for xwiki?
I'd like to report several XSS/CSRF vulnerabilities and do not want
everybody to see the details before they are fixed. Hello,
How can I specify a security level mentioned in JIRA help
(http://jira.xwiki.org/jira/secure/ShowConstantsHelp.jspa#IssueTypes)
for a new issue?
I think you need to create the issue, save it and then edit it again since
the first issue creation screen doesn't display the security level IIRC.
12:23 p.m.
On 02/10/2010 12:09 PM, Alex Busenius wrote:
Hi Guillaume,
On 02/10/2010 11:46 AM, Guillaume Lerouge wrote:
I'll take a look at the Jira administrative settings to see if I can
make the Security field public.
--
Sergiu Dumitriu
http://purl.org/net/sergiu/
Hi Alex,
On Wed, Feb 10, 2010 at 1:26 AM, Alex Busenius<the_unknown(a)gmx.net> wrote:
Thank you for the hint, but I still can't change the security level
there. The only thing that comes close to it is the "Viewable By" field,
but the dropdown box only allows me to choose between "All Users",
"Users" or "jira-users".
Is there any other established way to report security bugs for xwiki?
I'd like to report several XSS/CSRF vulnerabilities and do not want
everybody to see the details before they are fixed. Hello,
How can I specify a security level mentioned in JIRA help
(http://jira.xwiki.org/jira/secure/ShowConstantsHelp.jspa#IssueTypes)
for a new issue?
I think you need to create the issue, save it and then edit it again since
the first issue creation screen doesn't display the security level IIRC.
12:25 p.m.
On 02/10/2010 12:23 PM, Sergiu Dumitriu wrote:
On 02/10/2010 12:09 PM, Alex Busenius wrote:
Done, try now.
--
Sergiu Dumitriu
http://purl.org/net/sergiu/
Hi Guillaume,
On 02/10/2010 11:46 AM, Guillaume Lerouge wrote:
I'll take a look at the Jira administrative settings to see if I can
make the Security field public.
Hi Alex,
On Wed, Feb 10, 2010 at 1:26 AM, Alex Busenius<the_unknown(a)gmx.net>
wrote:
Thank you for the hint, but I still can't change the security level
there. The only thing that comes close to it is the "Viewable By" field,
but the dropdown box only allows me to choose between "All Users",
"Users" or "jira-users".
Is there any other established way to report security bugs for xwiki?
I'd like to report several XSS/CSRF vulnerabilities and do not want
everybody to see the details before they are fixed. Hello,
How can I specify a security level mentioned in JIRA help
(http://jira.xwiki.org/jira/secure/ShowConstantsHelp.jspa#IssueTypes)
for a new issue?
I think you need to create the issue, save it and then edit it again
since
the first issue creation screen doesn't display the security level IIRC.
12:30 p.m.
On 02/10/2010 12:17 PM, Vincent Massol wrote:
Hi Alex,
On Feb 10, 2010, at 12:09 PM, Alex Busenius wrote:
Vincent, you didn't do it right, you granted him the right to view
confidential issues, not to change the security setting.
I changed the permission so that the reporter can mark issues as
confidential.
--
Sergiu Dumitriu
http://purl.org/net/sergiu/
Hi Guillaume,
On 02/10/2010 11:46 AM, Guillaume Lerouge wrote:
Thanks for that. I've just given you the right on jira so all should be ok now. Can
you verify? Hi Alex,
On Wed, Feb 10, 2010 at 1:26 AM, Alex Busenius<the_unknown(a)gmx.net> wrote:
Thank you for the hint, but I still can't change the security level
there. The only thing that comes close to it is the "Viewable By" field,
but the dropdown box only allows me to choose between "All Users",
"Users" or "jira-users".
Is there any other established way to report security bugs for xwiki?
I'd like to report several XSS/CSRF vulnerabilities and do not want
everybody to see the details before they are fixed. Hello,
How can I specify a security level mentioned in JIRA help
(http://jira.xwiki.org/jira/secure/ShowConstantsHelp.jspa#IssueTypes)
for a new issue?
I think you need to create the issue, save it and then edit it again since
the first issue creation screen doesn't display the security level IIRC.
12:47 p.m.
Hi Vincent,
On 02/10/2010 12:17 PM, Vincent Massol wrote:
Hi Alex,
On Feb 10, 2010, at 12:09 PM, Alex Busenius wrote:
Thanks, it works now.
Regards,
Alex
Hi Guillaume,
On 02/10/2010 11:46 AM, Guillaume Lerouge wrote:
Thanks for that. I've just given you the right on jira so all should be ok now. Can
you verify?
Hi Alex,
On Wed, Feb 10, 2010 at 1:26 AM, Alex Busenius <the_unknown(a)gmx.net> wrote:
Thank you for the hint, but I still can't change the security level
there. The only thing that comes close to it is the "Viewable By" field,
but the dropdown box only allows me to choose between "All Users",
"Users" or "jira-users".
Is there any other established way to report security bugs for xwiki?
I'd like to report several XSS/CSRF vulnerabilities and do not want
everybody to see the details before they are fixed. Hello,
How can I specify a security level mentioned in JIRA help
(http://jira.xwiki.org/jira/secure/ShowConstantsHelp.jspa#IssueTypes)
for a new issue?
I think you need to create the issue, save it and then edit it again since
the first issue creation screen doesn't display the security level IIRC.
Thanks
-Vincent
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
5429
days inactive
5429
days old
9 comments
6 participants
participants (6)
-
Alex Busenius -
Guillaume Lerouge -
Jerome Velociter -
Sergiu Dumitriu -
Thomas Mortagne -
Vincent Massol