Re: GCC Bugzilla accounts

[Ian Lance Taylor <ian@airs.com>]

Joseph Myers <joseph@codesourcery.com> writes:

> On Thu, 25 May 2017, Carlos O'Donell wrote:
>
>> Instead there we allow users to create all of their own accounts, but by
>> default you don't get editbugs. You have to have someone grant you editbugs,
>> and that can be done by anyone else who previously had editbugs, so you can
>> just email the list and someone will quickly bless you.
>> 
>> Is the account creation still an anti-spam tactic?
>> 
>> I think it's a terrible one, the editbugs removal seems to have worked much
>> better. Now spammers cant change any existing bugs. They can still file
>> new bugs, which we can zap entirely.
>
> Spammers were filing new spam bugs about as fast as contrib/mark_spam.py 
> could mark them as spam.

Personally, I think the ideal approach would be if bugzilla supported a
moderation strategy.  Anybody could create an account, but the first
time they filed a bug, or commented on a bug, their change would be held
for moderation.  If a moderator approved a change, their subsequent
changes would flow automatically.  If the moderator blocked the change,
the account would be disabled.  Then we would only require a few people
to periodically moderate new bugzilla users.

But that is just a wish.  I have no reason to believe that bugzilla
supports this approach.

Ian