Change Details

This takes the type created in {T204160} and makes it the default reporting mechanism. Tasks created as this type can be [[ https://phabricator.wikimedia.org/maniphest/query/fEwniRncfgcf/#R | searched by task type ]] This all relates to the reworking of the #security-team triage process for which we have created a [[ https://phabricator.wikimedia.org/dashboard/view/428/ | dashboard ]]. That dashboard is also the default view for our [[ https://phabricator.wikimedia.org/portal/view/3/ | portal ]]. ---- Security Subtask Type: Creating and Editing (from [[ https://docs.google.com/document/d/1bYH9pEa-a-Zw2GrKxqGRH-yD3ZI6ujiO4gt6RD4n2Xw/edit#heading=h.w4m9qcv6eq2 | workflow documentation ]]) * A basic reporting form that has bare needed fields should be available for all users * A basic+ editing form should be available which allow adding context to the basic reporting. I.E. editing fields not shown on the basic creation form. The basic+ editing form can also be used for creation but isn't marked as a default creation form. * Adding a subscriber (CC) allows access, including editing of the task, but CC users cannot change the task ACLs if they are not a member of #security * An advanced reporting and editing form should be available to members of #Security * An additional advanced reporting and editing form should be available to members of #acl*security-team which allow editing speciality fields used for team reporting purposes (summary, impact), that require prior knowledge to determine or are representative of formulaic output (risk rating). These field values show up on the task when present for all viewers. ----- [x] [[ https://phabricator.wikimedia.org/transactions/editengine/maniphest.task/view/75/ | Create basic reporting form for subtype ]] [x] [[ https://phabricator.wikimedia.org/transactions/editengine/maniphest.task/view/74/ | Create basic editing form for all users ]] [x] [[ https://phabricator.wikimedia.org/transactions/editengine/maniphest.task/view/73/ | Create #security members advanced creation/edit form ]] (includes ability to create adhoc ACLs) [x] [[ https://phabricator.wikimedia.org/transactions/editengine/maniphest.task/view/78/ | Create #security-team advanced editing form ]] (allows editing the risk rating score) [x] Replace the boiler plate (Experimental) annotations [x] Set new basic creation form as default portal drop down option [x] Update reporting security issue form link on https://www.mediawiki.org/wiki/Reporting_security_bugs [x] [[ https://phabricator.wikimedia.org/transactions/editengine/maniphest.task/view/2/ | Unmark form 2 as default creation form ]] [x] [[ https://phabricator.wikimedia.org/maniphest/task/edit/form/2/ | Set legacy form as deprecated ]] [x] Reorder creation forms to reflect new legacy status etc [x] {T240493} [ ] {T242018} [ ] run down straggler references (a prior documentation deduplication and consolidation project seems to have pointed everything to our [[ https://www.mediawiki.org/wiki/Reporting_security_bugs | process ]] so hopefully few if any)

This takes the type created in {T204160} and makes it the default reporting mechanism. Tasks created as this type can be [[ https://phabricator.wikimedia.org/maniphest/query/fEwniRncfgcf/#R | searched by task type ]] This all relates to the reworking of the #security-team triage process for which we have created a [[ https://phabricator.wikimedia.org/dashboard/view/428/ | dashboard ]]. That dashboard is also the default view for our [[ https://phabricator.wikimedia.org/portal/view/3/ | portal ]]. ---- Security Subtask Type: Creating and Editing (from [[ https://docs.google.com/document/d/1bYH9pEa-a-Zw2GrKxqGRH-yD3ZI6ujiO4gt6RD4n2Xw/edit#heading=h.w4m9qcv6eq2 | workflow documentation ]]) * A basic reporting form that has bare needed fields should be available for all users * A basic+ editing form should be available which allow adding context to the basic reporting. I.E. editing fields not shown on the basic creation form. The basic+ editing form can also be used for creation but isn't marked as a default creation form. * Adding a subscriber (CC) allows access, including editing of the task, but CC users cannot change the task ACLs if they are not a member of #security * An advanced reporting and editing form should be available to members of #Security * An additional advanced reporting and editing form should be available to members of #acl*security-team which allow editing speciality fields used for team reporting purposes (summary, impact), that require prior knowledge to determine or are representative of formulaic output (risk rating). These field values show up on the task when present for all viewers. ----- [x] [[ https://phabricator.wikimedia.org/transactions/editengine/maniphest.task/view/75/ | Create basic reporting form for subtype ]] [x] [[ https://phabricator.wikimedia.org/transactions/editengine/maniphest.task/view/74/ | Create basic editing form for all users ]] [x] [[ https://phabricator.wikimedia.org/transactions/editengine/maniphest.task/view/73/ | Create #security members advanced creation/edit form ]] (includes ability to create adhoc ACLs) [x] [[ https://phabricator.wikimedia.org/transactions/editengine/maniphest.task/view/78/ | Create #security-team advanced editing form ]] (allows editing the risk rating score) [x] Replace the boiler plate (Experimental) annotations [x] Set new basic creation form as default portal drop down option [x] Update reporting security issue form link on https://www.mediawiki.org/wiki/Reporting_security_bugs [x] [[ https://phabricator.wikimedia.org/transactions/editengine/maniphest.task/view/2/ | Unmark form 2 as default creation form ]] [x] [[ https://phabricator.wikimedia.org/maniphest/task/edit/form/2/ | Set legacy form as deprecated ]] [x] Reorder creation forms to reflect new legacy status etc [x] {T240493} [ ] {T242018} [ ] run down straggler references (a prior documentation deduplication and consolidation project seems to have pointed everything to our [[ https://www.mediawiki.org/wiki/Reporting_security_bugs | process ]] so hopefully few if any) (T243028)

This takes the type created in {T204160} and makes it the default reporting mechanism. Tasks created as this type can be [[ https://phabricator.wikimedia.org/maniphest/query/fEwniRncfgcf/#R | searched by task type ]] This all relates to the reworking of the #security-team triage process for which we have created a [[ https://phabricator.wikimedia.org/dashboard/view/428/ | dashboard ]]. That dashboard is also the default view for our [[ https://phabricator.wikimedia.org/portal/view/3/ | portal ]]. ---- Security Subtask Type: Creating and Editing (from [[ https://docs.google.com/document/d/1bYH9pEa-a-Zw2GrKxqGRH-yD3ZI6ujiO4gt6RD4n2Xw/edit#heading=h.w4m9qcv6eq2 | workflow documentation ]]) * A basic reporting form that has bare needed fields should be available for all users * A basic+ editing form should be available which allow adding context to the basic reporting. I.E. editing fields not shown on the basic creation form. The basic+ editing form can also be used for creation but isn't marked as a default creation form. * Adding a subscriber (CC) allows access, including editing of the task, but CC users cannot change the task ACLs if they are not a member of #security * An advanced reporting and editing form should be available to members of #Security * An additional advanced reporting and editing form should be available to members of #acl*security-team which allow editing speciality fields used for team reporting purposes (summary, impact), that require prior knowledge to determine or are representative of formulaic output (risk rating). These field values show up on the task when present for all viewers. ----- [x] [[ https://phabricator.wikimedia.org/transactions/editengine/maniphest.task/view/75/ | Create basic reporting form for subtype ]] [x] [[ https://phabricator.wikimedia.org/transactions/editengine/maniphest.task/view/74/ | Create basic editing form for all users ]] [x] [[ https://phabricator.wikimedia.org/transactions/editengine/maniphest.task/view/73/ | Create #security members advanced creation/edit form ]] (includes ability to create adhoc ACLs) [x] [[ https://phabricator.wikimedia.org/transactions/editengine/maniphest.task/view/78/ | Create #security-team advanced editing form ]] (allows editing the risk rating score) [x] Replace the boiler plate (Experimental) annotations [x] Set new basic creation form as default portal drop down option [x] Update reporting security issue form link on https://www.mediawiki.org/wiki/Reporting_security_bugs [x] [[ https://phabricator.wikimedia.org/transactions/editengine/maniphest.task/view/2/ | Unmark form 2 as default creation form ]] [x] [[ https://phabricator.wikimedia.org/maniphest/task/edit/form/2/ | Set legacy form as deprecated ]] [x] Reorder creation forms to reflect new legacy status etc [x] {T240493} [ ] {T242018} [ ] run down straggler references (a prior documentation deduplication and consolidation project seems to have pointed everything to our [[ https://www.mediawiki.org/wiki/Reporting_security_bugs | process ]] so hopefully few if any) (T243028)