Confirmed users
241
edits
BMO/Meetings/WorkWeekBOF201104: Difference between revisions
no edit summary
No edit summary |
No edit summary |
||
| Line 47: | Line 47: | ||
== Meeting Notes == | == Meeting Notes == | ||
*Requested Features | |||
** Duplicate Search - "Search for similar bugs" Search option within the bug view that starts a search with the same product and component. Intent is to easily verify if bugs submitted by community are dups with existing bugs | |||
** Visual Differentiation between "Resolved" and "Verified" state - Both are currently indicated with strike through. Would like to have easy visual indicator to represent Resolved and different indicator for Verified. | |||
** Be able to edit a search inline (wihtout editing the URL) to drill down/up on sets of bugs | |||
** Display or be able to get to full URL of search | |||
** It would be really nice to thread conversation when 'reply' is clicked so that the conversation flow could be seen | |||
** also hide/display quoted text....its hard to know what you're quoting. the general rule seems to be don't quote any more than you absolutely need to (or expect to be yelled at) but if you err in the other direction, you get into silly discussions about "no, this was in reference to this....not that" | |||
** Round-trip from basic search to advanced search -- type in a basic search, then be able to go to the advanced search page with fields populated based on that quicksearch. And better, be able to go the other way too (meaning quicksearch needs full functionality) | |||
** Allow gmail to filter bugmail, esp watch bugmail. Allow setting email address? (user+token@blah.com) | |||
* Security Features | |||
** Two factor auth | |||
** password policy / rotation (per security groups) | |||
** stronger password policies for security groups, including blacklists | |||
** IP address notifications w/ Geo Info (footer?) | |||
** Brute force protection? [account lockout exists] | |||
** 1 guess against multiple accounts (e.g. "pass123") - IP based captchas | |||
** logging within the app for critical events (Syslog/CEF) | |||
** View attachment settings without opening attachment (discussed within 554121) | |||
** hide view iframe unless patch? | |||
** stale account management - clear passwords for unused accounts? (need to track user logins) | |||
** Bugzilla API - Protect user credentials (don't send within URL or in clear as cookie) | |||
** but if username/password is not simply usable with e.g. basicauth/URL, there should be libraries backends written for each language of interest such that tools can be *easily* written which require authentication | |||
* search performance | |||
** google sitemap indexing will help | |||
** looking at leveraging metric's work using nosql (elastic search, etc) | |||
* UX: | |||
** Hire a UX person | |||
** CC without page saving ("starring") | |||
** bugzilla-jetpack things: | |||
** inline history [working on this now] | |||
** URL after form submission (process_bug.cgi) [arguing about this now] | |||
** column based UI (moving less used information to the side - like Google Code) | |||
** including whiteboard entries, if applicable....i want/need to be able to see a column of whiteboard flags as....flags, and be able to sort by them!!!! | |||
** CC, r?, etc list being context sensitive | |||
** patches inline | |||
** update bugs dynamically (like gmail: "This page has been updated" in bottom right) | |||
** don't go offpage for anthing common (like attachments) | |||
** Don't lose an r? or CC that doesn't match a user | |||
** Fix when CC, r? list doesnt work | |||
** put field updates in the same place (after comment box entered; like Google Code) | |||
** submit over AJAX, never leave the page, never refresh | |||
** attachments not on top of comments | |||
** performance improvements - better caching and prefetching - everything should be _instant_ | |||
** highlight changd fields (red glow; so you can see at a glance what has changed) | |||
** make platform optional | |||
** better search results grid | |||
** copy Google Code | |||
** allow starring without entering | |||
** convert as many fields as possible into tags | |||
*** whiteboard | |||
*** tags | |||
*** keywords | |||
*** platform | |||
*** version | |||
*** status (maybe) | |||
*** importace | |||
*** milestone | |||
*** maybe (esp ones that cross components): | |||
*** product | |||
*** component | |||
=== Action Items === | === Action Items === | ||