Edit security bug subscribers

[Andrea Corbellini]

Currently it is possible to subscribe to all public bugs for a project, but not to all security bugs.
Security contacts should be able to do so.

[Graham Binns (gmb)]

On 25/01/09 12:42, Andrea Corbellini wrote:
> Public bug reported:
>
> Currently it is possible to subscribe to all public bugs for a
> project, but not to all security bugs. Security contacts should be
> able to do so.
>

This is what the security contact for projects is for
(https://bugs.launchpad.net/$project/+securitycontact). If anyone were
able to subscribe to all security bugs for a contact then there would be
no way of policing who was able to see them.

The way to set this up for your project is:

* Create a Moderated or Restricted team, fooey-security, and set it as
the security contact for your project
* When you want someone to see all security related bugs, add them to
fooey-security.

 status wontfix

[Andrea Corbellini (andrea.corbellini)]

Thanks for looking at this.
The problem is that if the team has a mailing list, security bugs will be publicy available. See also bug 320641.