Partho.Mukherjee@desconsoft.com wrote:
> Bill,
>
> You have mentioned that you had changed your Bugzilla installation to
> restrict permissions and verify/close permission was granted only to
> the QA team members. Can you please give me the detailed steps to
> achieve this. It would be very helpful.


Well, keeping in mind it has been awhile & I'm using Bugzilla 3.0 (while
I wait for Testopia to catch up with the current release), but as I
recall it simply entailed modifying the "check_can_change_field"
function in Bugzilla/Bug.pm ... inserting the code shown below between
the "WJD edit" comments at that location (also note that this newsreader
has wrapped some lines below that are on a single line in the actual code):

# Ignore the assigned_to field if the bug is not being reassigned
if ($field eq 'assigned_to'
&& $data->{'knob'} ne 'reassignbycomponent'
&& $data->{'knob'} ne 'reassign')
{
return 1;
}

# If the user isn't allowed to change a field, we must tell him who can.
# We store the required permission set into the $PrivilegesRequired
# variable which gets passed to the error template.
#
# $PrivilegesRequired = 0 : no privileges required;
# $PrivilegesRequired = 1 : the reporter, assignee or an empowered user;
# $PrivilegesRequired = 2 : the assignee or an empowered user;
# $PrivilegesRequired = 3 : an empowered user.

# WJD edit - restrict QA priv ("VERIFIED" or "CLOSED" status)
if ($field eq 'bug_status' && ($newvalue eq 'VERIFIED' || $newvalue
eq 'CLOSED')){
$$PrivilegesRequired = 3;
return $user->in_group('quality_assurance', $self->{'product_id'});
}
# end WJD edit

# Allow anyone with (product-specific) "editbugs" privs to change
anything.
if ($user->in_group('editbugs', $self->{'product_id'})) {
return 1;
}


Then just add the "quality_assurance" group to bugzilla & add whoever
you wish to that group.

Hope this helps you out ...
Bill Davis