Re: GCC Bugzilla accounts

[David Edelsohn <dje.gcc@gmail.com>]

On Wed, May 31, 2017 at 8:38 AM, Carlos O'Donell <carlos@redhat.com> wrote:
> On 05/31/2017 07:54 AM, David Edelsohn wrote:
>> On Thu, May 25, 2017 at 4:16 PM, Ian Lance Taylor <ian@airs.com> wrote:
>>> Joseph Myers <joseph@codesourcery.com> writes:
>>>
>>>> On Thu, 25 May 2017, Carlos O'Donell wrote:
>>>>
>>>>> Instead there we allow users to create all of their own accounts, but by
>>>>> default you don't get editbugs. You have to have someone grant you editbugs,
>>>>> and that can be done by anyone else who previously had editbugs, so you can
>>>>> just email the list and someone will quickly bless you.
>>>>>
>>>>> Is the account creation still an anti-spam tactic?
>>>>>
>>>>> I think it's a terrible one, the editbugs removal seems to have worked much
>>>>> better. Now spammers cant change any existing bugs. They can still file
>>>>> new bugs, which we can zap entirely.
>>>>
>>>> Spammers were filing new spam bugs about as fast as contrib/mark_spam.py
>>>> could mark them as spam.
>>>
>>> Personally, I think the ideal approach would be if bugzilla supported a
>>> moderation strategy.  Anybody could create an account, but the first
>>> time they filed a bug, or commented on a bug, their change would be held
>>> for moderation.  If a moderator approved a change, their subsequent
>>> changes would flow automatically.  If the moderator blocked the change,
>>> the account would be disabled.  Then we would only require a few people
>>> to periodically moderate new bugzilla users.
>>>
>>> But that is just a wish.  I have no reason to believe that bugzilla
>>> supports this approach.
>>
>> What are the next steps to improve the GCC Bugzilla account creation
>> process to reduce the number of users and bug reporters who are driven
>> away?
>
> Put together a GNU Toolchain fund project to fund the work? ;-)
>
> Concretely I think we need a design document explaining how it should
> work, and that needs to be discussed, and when it's ready we probably
> would want upstream bugzilla to agree to it, and then we fund the work
> to deliver it?

How can we improve the current situation while we bikeshed new
features for Bugzilla?  The current requests for account creation
either are being lost or not responded.  The current process needs to
be addressed.

Thanks, David