launchpad-dev team mailing list archive

[Curtis Hovey <curtis@xxxxxxxxxx>]

On Wed, 2011-06-22 at 14:16 -0500, Deryck Hodge wrote:
> > This would break the contract desired for security bugs: that only
> the
> > security team can see them.
> >
> 
> I agree.  If bug supervisor shouldn't see security bugs, just marking
> it private shouldn't grant additional privileged.  It seems simpler
> and more consistent to say "if it's a security bug, regardless of
> private or public, only the security contact is subscribed." 

I agree. Security prevails.
-- 

__C U R T I S  C.  H O V E Y___________
No matter where you go...there you are.