3 ms·

Incredibly interesting, and incredibly simple. Very cool stuff. I do wonder... Why on earth is domain based privileges ever a good idea? There should be a prop

• pilif 11y ago
  There is a proper roles system. But as a shortcut, roles are assigned by domain. It's either this or manually creating/accepting accounts if they need privileges other than the default. In this case, they could get away with the shortcut (if you exclude the MySQL misconfiguration), so that's what they have done.
• geofft 11y ago
  Because the business requirement is "Anyone from this company we are partnering with, which has signed a mutual NDA at the company level, should be able to see these bugs," and "The local Bugzilla admins shouldn't be involved in the hiring processes of that other company," and "No, they don't have a public facing identity management system we can integrate with."