Comment 4 for bug 447418

Revision history for this message
Curtis Hovey (sinzui) wrote :

Given that this page counts and lists mnay bugs that may be private, The view should implement a private bug cache like private branches. The code-team added a rule to store all the private branches the user has access to in the request so that the security on the individiual branches did not need to be checked. We want to ensure that the query only returns bugs that the user has access to, then ensure that the bug's security is not rechecked.