From: Ondrej J. <ne...@po...> - 2003-03-01 02:22:15
|
I just realized these things related to Mantis reminders. 1. Reminder can be sent to any user. Even to user, who is not anyhow related to particular bug. The common sence will expect, that reminder can be sent only to reporter, developer and minitoring user. 2. Anonymous user can send reminders. Yes, they do not have link on the bug view page, however ich you change url to "bug_reminder_page?bug_id=N", than it seems, that it started to work. I disabled whole feature, since I do not want to provide mechanism for spamming my users aby anyone else. Can please explain me this issue or confirm, that it is a Mantis bug? Thanks. -- _/| Ondrej Jombik - ne...@ph... - http://www.nepto.sk - OJ812-RIPE <_ \ Platon SDG - open source software development - http://platon.sk `\| UNIX is user friendly. It's selective about who its friends are! '` |
From: Victor B. <vb...@op...> - 2003-03-01 02:47:41
|
Hi Ondrej, > I just realized these things related to Mantis reminders. > > 1. Reminder can be sent to any user. Even to user, who is not anyhow > related to particular bug. The common sence will expect, that reminder > can be sent only to reporter, developer and monitoring user. I don't agree. If the user wants to send a reminder to reporter/developer/monitoring users, then he just needs to add a bugnote. Reminders provide you with a more flexible technique to invite people to participate in the defect. These people can participate through testing, verifying requirements, approving enhancements, or whatever. Unfortunately, the name "Reminder" is a mis-nomer, and I think we should change it when we find a better name. Also if $g_reminder_recipents_monitor_bug is ON, people you send a reminder to are automatically added to the monitor list of the bug. > 2. Anonymous user can send reminders. Yes, they do not have link on the > bug view page, however ich you change url to > "bug_reminder_page?bug_id=N", than it seems, that it started to work. I believe this is a bug that needs to be fixed (can you please report it in the bug tracker). The user should never be able to do something by going to a URL directly that he/she can not do through Mantis UI. > I disabled whole feature, since I do not want to provide mechanism for > spamming my users aby anyone else. Can please explain me this issue or > confirm, that it is a Mantis bug? Point 2 is a bug, 1 is not a bug. Regards, Victor. |
From: Ondrej J. <ne...@po...> - 2003-03-05 23:19:25
|
> > 1. Reminder can be sent to any user. Even to user, who is not anyhow > > related to particular bug. The common sence will expect, that reminder > > can be sent only to reporter, developer and monitoring user. > I don't agree. If the user wants to send a reminder to > reporter/developer/monitoring users, then he just needs to add a > bugnote. Reminders provide you with a more flexible technique to invite > people to participate in the defect. These people can participate > through testing, verifying requirements, approving enhancements, or > whatever. Unfortunately, the name "Reminder" is a mis-nomer, and I > think we should change it when we find a better name. Actually, Mantis can act as a really cool spamming software in this way. If you feel, that this is the right way... > Also if $g_reminder_recipents_monitor_bug is ON, people you send a > reminder to are automatically added to the monitor list of the bug. This behaviour is especially nasty bug. I can made *ALL* users monitoring particular bug just in few clicks. How easy! -- _/| Ondrej Jombik - ne...@ph... - http://www.nepto.sk - OJ812-RIPE <_ \ Platon SDG - open source software development - http://platon.sk `\| UNIX is user friendly. It's selective about who its friends are! '` |
From: Julian F. <ju...@be...> - 2003-03-06 00:56:41
|
Ondrej Jombik wrote: >>>1. Reminder can be sent to any user. Even to user, who is not anyhow >>> related to particular bug. The common sence will expect, that reminder >>> can be sent only to reporter, developer and monitoring user. >> >>I don't agree. If the user wants to send a reminder to >>reporter/developer/monitoring users, then he just needs to add a >>bugnote. Reminders provide you with a more flexible technique to invite >>people to participate in the defect. These people can participate >>through testing, verifying requirements, approving enhancements, or >>whatever. Unfortunately, the name "Reminder" is a mis-nomer, and I >>think we should change it when we find a better name. > > > Actually, Mantis can act as a really cool spamming software in this way. > If you feel, that this is the right way... > > >>Also if $g_reminder_recipents_monitor_bug is ON, people you send a >>reminder to are automatically added to the monitor list of the bug. > > > This behaviour is especially nasty bug. I can made *ALL* users monitoring > particular bug just in few clicks. How easy! For what it's worth, I mostly agree. I haven't much liked this feature all along but others seem to want it so I'll just disable it on my system. And while I see how it's convenient to add the recipients as monitoring users, I think it's annoying that someone could add me to hundreds of bugs and I'd have to go remove myself from each one. Julian -- ju...@be... Beta4 Productions (http://www.beta4.com) |
From: Jeroen L. <jl...@ca...> - 2003-03-06 12:03:57
|
At 16:52 5-3-2003 -0800, you wrote: >Ondrej Jombik wrote: >>>>1. Reminder can be sent to any user. Even to user, who is not anyhow >>>> related to particular bug. The common sence will expect, that reminder >>>> can be sent only to reporter, developer and monitoring user. >>> >>>I don't agree. If the user wants to send a reminder to >>>reporter/developer/monitoring users, then he just needs to add a >>>bugnote. Reminders provide you with a more flexible technique to invite >>>people to participate in the defect. These people can participate >>>through testing, verifying requirements, approving enhancements, or >>>whatever. Unfortunately, the name "Reminder" is a mis-nomer, and I >>>think we should change it when we find a better name. >> >>Actually, Mantis can act as a really cool spamming software in this way. >>If you feel, that this is the right way... >> >>>Also if $g_reminder_recipents_monitor_bug is ON, people you send a >>>reminder to are automatically added to the monitor list of the bug. >> >>This behaviour is especially nasty bug. I can made *ALL* users monitoring >>particular bug just in few clicks. How easy! > >For what it's worth, I mostly agree. I haven't much liked this feature >all along but others seem to want it so I'll just disable it on my >system. And while I see how it's convenient to add the recipients as >monitoring users, I think it's annoying that someone could add me to >hundreds of bugs and I'd have to go remove myself from each one. We could make the reminder feature and the monitor add-on OFF by default? Maybe also make an option which decides who appears in the list: developers, reporter/assigned person, or everyone? Jeroen |
From: Victor B. <vb...@op...> - 2003-03-06 13:11:46
|
Ondrej, > > > 1. Reminder can be sent to any user. Even to user, who is not anyhow > > > related to particular bug. The common sence will expect, > that reminder > > > can be sent only to reporter, developer and monitoring user. > > I don't agree. If the user wants to send a reminder to > > reporter/developer/monitoring users, then he just needs to add a > > bugnote. Reminders provide you with a more flexible technique to invite > > people to participate in the defect. These people can participate > > through testing, verifying requirements, approving enhancements, or > > whatever. Unfortunately, the name "Reminder" is a mis-nomer, and I > > think we should change it when we find a better name. > > Actually, Mantis can act as a really cool spamming software in this way. > If you feel, that this is the right way... > > > Also if $g_reminder_recipents_monitor_bug is ON, people you send a > > reminder to are automatically added to the monitor list of the bug. > > This behaviour is especially nasty bug. I can made *ALL* users monitoring > particular bug just in few clicks. How easy! I agree with your point. However, you have to take into consideration the fact that not all Mantis installation are open for public, or allow annonymous login. In my case, only company employees + selected customers have access to the bug tracker. Hence, we would benefit from the flexibility of this feature without suffering from spam. As far as I am concerned, I wanted a cc (or add others to monitor list) feature, where a manager can direct the attention of several people to a certain bug. Meanwhile, you can always turn the whole feature OFF (or turn it OFF for people with access level less than DEVELOPER). And as jlatour said, we can always make it more configurable. Regards, Victor. |
From: Ondrej J. <ne...@po...> - 2003-03-09 23:13:30
|
> > > Also if $g_reminder_recipents_monitor_bug is ON, people you send a > > > reminder to are automatically added to the monitor list of the bug. > > This behaviour is especially nasty bug. I can made *ALL* users monitoring > > particular bug just in few clicks. How easy! > I agree with your point. However, you have to take into consideration > the fact that not all Mantis installation are open for public, or allow > annonymous login. > Meanwhile, you can always turn the whole feature OFF (or turn it OFF for > people with access level less than DEVELOPER). And as jlatour said, we can > always make it more configurable. Actually I did not realize, that Mantis can be used also in private environments. Than this feature looks reasonable. However, to have this configurable looks definitely like the right way to go. I hope it will be taken into consideration in further development (0.19-dev?). -- _/| Ondrej Jombik - ne...@ph... - http://www.nepto.sk - OJ812-RIPE <_ \ Platon SDG - open source software development - http://platon.sk `\| Ako sa do hory vola, tak sa zhori traktor! (c) 1999 Rattkin/MFF '` |