Re: getting spammed on bugzilla

[Mark Wielaard <mark@klomp.org>]

Hi,

On Sun, Nov 28, 2021 at 12:35:51PM -0500, Frank Ch. Eigler via Overseers wrote:
> > > That's a matter of <template/en/default/account/create.html.tmp>, which
> > > is now updated on sourceware-bugzilla.
> > 
> > I would like to update the text so that it asks people to mention the
> > project they want to report a bug for. So that it is more clear
> > whether the request is for gcc or a sourceware project. But I don't
> > really understand how the templates are updated/generated.
> 
> The file name I posted is for the template input: just modify it and
> bob is your uncle.

Updated.

> > I find this hard to use. It seems to demand a password and 'Notify
> > User' isn't enabled by default (should it?). Do people need edituser
> > permisssion to use this form (who has this and could we maybe make it
> > so that anybody with editbugs permissions can bless new users?)?
> 
> I don't know.  The people with editusers should be about the same
> people as those with editbugs, i.e., bugzilla administrators.  The
> higher, the fewer.  The few, the proud.

It seems only "admins" can use the form. A user with just editbugs
cannot and gets a permission denied: "Sorry, you aren't a member of
the 'editusers' group, and you don't have permissions to add or remove
people from a group, and so you are not authorized to add, modify or
delete users."

Can we somehow make it so that we have a special user creation page so
that also normal editbugs people can add new users? Is there someone
we can ask how this works on the gcc side?

Cheers,

Mark