Maniphest T240490

Revamping Security-Team Work Intake and Flows
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	• chasemp
	Dec 11 2019, 7:04 PM

Tags

Referenced Files

None

Subscribers

Description

This is a parent task for the epic in the title. Drafting a lot of stuff in a doc.

Related blog post.

https://phabricator.wikimedia.org/T240490#5995302

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Resolved		• chasemp	T240490 Revamping Security-Team Work Intake and Flows
					Restricted Task
		Resolved		• chasemp	T239144 PoC for security@ email tracking
		Resolved		• mmodell	T239162 Maniphest task: Add cc address to the "From email" field that replies to the task
		Resolved		• chasemp	T240384 Cleanup S11 space and define its use more clearly
		Resolved		• JBennett	T240492 Create generic security-team request for service intake mechanism
		Resolved		• mmodell	T240493 Make ‘Protect as security issue’ set priority as ‘Needs Triage’
					Restricted Task
		Resolved		• chasemp	T240494 Create Security-Team-Services umbrella project
		Resolved		• chasemp	T240605 Set Security Issue Task Type as default for Security reporting
		Resolved		• chasemp	T240901 Write 'What is a Security Issue' for mw.org report page
		Resolved		• chasemp	T240902 Move Services and Charter documentation to mw.org
		Resolved		• chasemp	T240996 Allow jcross to edit forms in phabricator
		Resolved		• Jcross	T240999 Create 'user affiliation' custom drop down field for forms
		Resolved		• mmodell	T242018 Make ‘Protect as security issue’ add project #security-team
		Resolved		• chasemp	T242129 Separate security-readiness-review and security-concept-review service lines
		Resolved		• chasemp	T242032 make security-team-reviews a subproject of security-team-services
		Resolved		• chasemp	T242163 Restore resolved security-team-reviews tasks
		Resolved		• chasemp	T242280 Creation of a google group called security-help
		Resolved		• chasemp	T199688 Decide if H141 ("Add security tag when Security flag is set to Software security bug") is needed or not
		Resolved		• chasemp	T242675 Add dsharpe as owner of security-help@
		Resolved		• chasemp	T242765 Create 'secteam-discussion' tag
		Resolved	BUG REPORT	• chasemp	T243028 Broken links to "Report Security Issue" form
		Resolved		• chasemp	T244159 Turn off #security workboard
		Resolved		• chasemp	T244161 Turn off #privacy workboard
		Resolved		• chasemp	T244165 Convert #Security to acl*Security
		Resolved		• mmodell	T245201 Update protect as security issue to use acl*security
					Restricted Task
		Resolved		• chasemp	T230951 Transfer ownership of mediawiki-security mailman list to Security Team

Event Timeline

• chasemp triaged this task as Medium priority.Dec 11 2019, 7:04 PM

• chasemp created this task.

• chasemp created this object with visibility "acl*security (Project)".

• chasemp created this object with edit policy "acl*security (Project)".

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptDec 11 2019, 7:04 PM

• chasemp added a subtask: Restricted Task.Dec 11 2019, 7:05 PM

• chasemp added a subtask: T239144: PoC for security@ email tracking.

• chasemp added a subtask: T240384: Cleanup S11 space and define its use more clearly.

• chasemp moved this task from Incoming to Watching on the Security-Team board.Dec 11 2019, 7:07 PM

• chasemp changed the status of subtask T240493: Make ‘Protect as security issue’ set priority as ‘Needs Triage’ from Open to Stalled.Dec 11 2019, 7:13 PM

Aklapper changed the status of subtask T240494: Create Security-Team-Services umbrella project from Open to Stalled.Dec 13 2019, 11:18 AM

• chasemp closed subtask T240902: Move Services and Charter documentation to mw.org as Resolved.Dec 16 2019, 9:03 PM

• chasemp changed the status of subtask T240494: Create Security-Team-Services umbrella project from Stalled to Open.Dec 16 2019, 9:21 PM

• chasemp closed subtask T240494: Create Security-Team-Services umbrella project as Resolved.Dec 16 2019, 9:54 PM

• chasemp closed subtask T240996: Allow jcross to edit forms in phabricator as Resolved.Dec 17 2019, 9:11 PM

• chasemp added a project: PM.Dec 17 2019, 9:28 PM

• mmodell closed subtask T240493: Make ‘Protect as security issue’ set priority as ‘Needs Triage’ as Resolved.Dec 19 2019, 2:19 AM

• chasemp closed subtask Restricted Task as Resolved.Dec 23 2019, 4:46 PM

• chasemp closed subtask T240384: Cleanup S11 space and define its use more clearly as Resolved.Jan 2 2020, 6:55 PM

• chasemp closed subtask T240999: Create 'user affiliation' custom drop down field for forms as Resolved.Jan 2 2020, 7:30 PM

• chasemp closed subtask T240901: Write 'What is a Security Issue' for mw.org report page as Resolved.Jan 2 2020, 8:30 PM

• JBennett closed subtask T240492: Create generic security-team request for service intake mechanism as Resolved.Jan 2 2020, 8:49 PM

• chasemp closed subtask T239144: PoC for security@ email tracking as Resolved.Jan 6 2020, 6:54 PM

• chasemp added a subtask: T242129: Separate security-readiness-review and security-concept-review service lines.Jan 8 2020, 4:46 PM

• chasemp added a subtask: T242032: make security-team-reviews a subproject of security-team-services.Jan 8 2020, 5:00 PM

• chasemp closed subtask T242280: Creation of a google group called security-help as Resolved.Jan 9 2020, 8:52 PM

• chasemp added a subtask: T199688: Decide if H141 ("Add security tag when Security flag is set to Software security bug") is needed or not.Jan 13 2020, 7:18 PM

• chasemp closed subtask T199688: Decide if H141 ("Add security tag when Security flag is set to Software security bug") is needed or not as Resolved.

• chasemp claimed this task.Jan 13 2020, 9:45 PM

• chasemp lowered the priority of this task from Medium to Lowest.

• chasemp closed subtask T242675: Add dsharpe as owner of security-help@ as Resolved.Jan 13 2020, 10:14 PM

• chasemp added a subtask: T242682: Write SOP for incoming email workflow for security@ and security-help@.Jan 13 2020, 10:39 PM

• chasemp added a subtask: T243028: Broken links to "Report Security Issue" form.Jan 16 2020, 10:34 PM

• chasemp closed subtask T243028: Broken links to "Report Security Issue" form as Resolved.Jan 17 2020, 5:08 PM

• chasemp closed subtask T242765: Create 'secteam-discussion' tag as Resolved.Jan 17 2020, 5:12 PM

• chasemp mentioned this in T242287: Update https://www.mediawiki.org/wiki/Reporting_security_bugs.Jan 17 2020, 5:25 PM

• chasemp closed subtask T240605: Set Security Issue Task Type as default for Security reporting as Resolved.Jan 21 2020, 9:00 PM

• mmodell closed subtask T242018: Make ‘Protect as security issue’ add project #security-team as Resolved.Jan 23 2020, 1:30 AM

• chasemp mentioned this in T244156: Make NDA task filing more obvious/prominent.Feb 3 2020, 6:53 PM

• chasemp added a subtask: T244159: Turn off #security workboard.Feb 3 2020, 7:07 PM

• chasemp closed subtask T244159: Turn off #security workboard as Resolved.Feb 3 2020, 7:10 PM

• chasemp added a subtask: T244161: Turn off #privacy workboard.

• chasemp updated the task description. (Show Details)Feb 3 2020, 8:33 PM

• chasemp added a subtask: Restricted Task.Feb 5 2020, 7:50 PM

• chasemp mentioned this in T245771: Adjust onboarding/offboarding logic to accommodate changes to #security (now acl*security).Feb 20 2020, 7:45 PM

• chasemp mentioned this in T242254: move_project breaks the world when moving a subproject that already has subprojects..Feb 20 2020, 7:50 PM

• chasemp closed subtask T244165: Convert #Security to acl*Security as Resolved.Feb 20 2020, 8:45 PM

• chasemp closed subtask Restricted Task as Resolved.Feb 24 2020, 8:11 PM

• chasemp removed a subtask: T242682: Write SOP for incoming email workflow for security@ and security-help@.Feb 24 2020, 8:47 PM

• chasemp updated the task description. (Show Details)

• chasemp added a subtask: T230951: Transfer ownership of mediawiki-security mailman list to Security Team.Feb 25 2020, 9:36 PM

• chasemp mentioned this in Unknown Object (Task).

• chasemp mentioned this in Unknown Object (Task).Feb 25 2020, 9:42 PM

• chasemp mentioned this in Unknown Object (Task).

• chasemp closed subtask T244161: Turn off #privacy workboard as Resolved.Mar 24 2020, 3:36 PM

All subtasks closed.

Related work identified during this project (but not sub work) to carry forward async:

T242682: Write SOP for incoming email workflow for security@ and security-help@
T242678: Configure security-help@ collab inbox group
T242287: Update https://www.mediawiki.org/wiki/Reporting_security_bugs
T242285: Create status mechanism(s) for security-team@ combining Asana and Phab
T247327: Combine RFS forms for Security Readiness Review and other RFS
{T246168}
{T246166}
{T246165}

• chasemp updated the task description. (Show Details)Mar 24 2020, 3:42 PM

• chasemp changed the visibility from "acl*security (Project)" to "Public (No Login Required)".

• chasemp moved this task from Watching to Our Part Is Done on the Security-Team board.

• chasemp closed this task as Resolved.Mar 24 2020, 4:07 PM