Too easy to spam a team by assigning a bug to them
Bug #299257 reported by
Jonathan Lange
This bug report is a duplicate of:
Bug #511269: only bug supervisor should be able to assign bugs to other people.
Edit
Remove
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Launchpad itself |
Triaged
|
High
|
Unassigned |
Bug Description
This is very closely related to bug 100080 -- maybe even a duplicate.
It's too easy to spam a large team by assigning them to a bug. One very common case is:
* I've found a bug in the package
* I'll file the bug and assign it to the maintainer (generally a large team on Ubuntu packages)
Bug 100080 suggests an "are you sure" page for big teams. That might work, although it's quite probable that users will just click-through.
Other possibilities are adding config options preventing teams from being assigned to bugs, or somehow restricting who can assign bugs & how. (e.g. if you aren't on the bug contact team, you can only assign bugs to yourself, or to individuals or something).
To post a comment you must log in.
https:/ /bugs.launchpad .net/bugs/ 287244 is another example of this happening - which spammed 55 people, completely needlessly.
The solution we came up with in #launchpad was to forbid assigning teams to bugs until you're in ubuntu-quality (or whatever the team is in the other projects that do that is)- ie, restrict it in the same way that importance is.