Re: Summary of BTS evaluations

[John Goerzen <jgoerzen@xxxxxxxxxxxx>]

On Fri, Jul 19, 2002 at 11:39:15AM -0400, Martijn Pieters wrote:

> > Cons:
> >  * Making changes to the config requires editing cryptic text files or even
> >    deleting all info in the database and restarting
> >  * Not a lot of flexibility in the security part.  Either people can
> >    do everything or they can do nothing.
> 
> The way I see it is that if you allow email to change bug status, security
> is moot anyway unless you require GPG signatures. I can *easily* forge email
> messages that pretend to come from someone else without signatures.

Yes, I know.  Everything that has e-mail access has that problem.  I'm not
too worried about it IF we have the ability to restrict what e-mails can
alter.  For instance, do we let e-mails open new tickets?  (Probably yes.)
Reassign tickets to other people?  (Probably no)  Add comments? (Yes)  Mark
a ticket done?  (Probably yes)

With the Debian BTS, anyone can do anything.  It generally works, actually,
but I'd prefer not to use that mechanism.

> >  * Interface is kinda ugly
> 
> But the templates are flexible; just redefine the colours, right?

Yes, and potentially do that again on the upgrades.  (Maybe not, though)  If
someone here has skills in that area, that would remove this particular con
-- I am no graphic designer :-)

-- 
John Goerzen <jgoerzen@xxxxxxxxxxxx>    GPG: 0x8A1D9A1F    www.complete.org