Re: getting spammed on bugzilla

[Mark Wielaard <mark@klomp.org>]

Hi Frank,

On Wed, Nov 24, 2021 at 07:19:25PM -0500, Frank Ch. Eigler via Overseers wrote:
> > > How about let's keep simple and direct people to overseers@ for now.
> > 
> > That is fine if all volunteers are subscribed to overseers and you
> > aren't afraid it will overwhelm this list.  But we also need a way to
> > disable new user signups
> 
> Ummmmmmmmmmmm about that.  How is this part supposed to work on gcc's
> bugzilla?  I just made myself a test user there, with no one else's
> approval, and ended up with a user that could append to an existing
> bug.  I think someone may have pooched the bugzilla administrative
> setting "createemailregexp", setting it to ".*", at some point.
> Should these be set to a magic value to actually impose restrictions?

So how does this work now?  As far as I can see the createemailregexp
for gcc is ".*" but for sourceware it is "^$".  So gcc allows
everything, but filters (how?) on the email domain? Would it make
sense to use the same settings for both?

> > make people aware they need to provide (which?) information to the
> > mailinglist and
> 
> That's a matter of <template/en/default/account/create.html.tmp>, which
> is now updated on sourceware-bugzilla.

I would like to update the text so that it asks people to mention the
project they want to report a bug for. So that it is more clear
whether the request is for gcc or a sourceware project. But I don't
really understand how the templates are updated/generated.

> > a way for volunteers to take that information and create new
> > accounts.
> 
> That's a matter of any bugzilla administrator reading this mailing list
> and doing the deed on the administrative Users/New form:
> 
> https://sourceware.org/bugzilla/editusers.cgi?action=add

I find this hard to use. It seems to demand a password and 'Notify
User' isn't enabled by default (should it?). Do people need edituser
permisssion to use this form (who has this and could we maybe make it
so that anybody with editbugs permissions can bless new users?)?

GCC seemed to have a specialized form (although I cannot find it now)
that had more defaults setup correctly. It seems to be defined in
gcc-bugzilla/data/template/extensions/GCC/template/en/default/pages/gcc/addusers.html.tmpl
but I don't know how it is being used.

Cheers,

Mark