From 8c3fdaa797bc941aeb07ec8dc36361d6f34ccc98 Mon Sep 17 00:00:00 2001
From: Dylan William Hardison <dylan@hardison.net>
Date: Sun, 14 Oct 2018 15:06:18 -0400
Subject: add a default security group

---
 Bugzilla/Install.pm | 15 +++++++++++++--
 1 file changed, 13 insertions(+), 2 deletions(-)

(limited to 'Bugzilla/Install.pm')

diff --git a/Bugzilla/Install.pm b/Bugzilla/Install.pm
index 705a8396c..64fc1580c 100644
--- a/Bugzilla/Install.pm
+++ b/Bugzilla/Install.pm
@@ -257,6 +257,17 @@ use constant SYSTEM_GROUPS => (
     name        => 'bz_can_disable_mfa',
     description => 'Can disable MFA when editing users',
   },
+  {
+    use_for_bugs => 1,
+    name         => 'bz_private',
+    description  => 'Private Bug',
+    inherited_by => ['bz_insiders'],
+  },
+  {
+    name => 'bz_insiders',
+    description =>
+      'Can see private attachments, comments, and bugs (for bugs in bz_private)',
+  },
 );
 
 use constant DEFAULT_CLASSIFICATION =>
@@ -311,8 +322,8 @@ sub update_system_groups {
   foreach my $definition (SYSTEM_GROUPS) {
     my $exists = new Bugzilla::Group({name => $definition->{name}});
     if (!$exists) {
-      $definition->{isbuggroup} = 0;
-      $definition->{silently}   = !$editbugs_exists;
+      $definition->{isbuggroup} = delete $definition->{use_for_bugs} // 0,
+        $definition->{silently} = !$editbugs_exists;
       my $inherited_by = delete $definition->{inherited_by};
       my $created      = Bugzilla::Group->create($definition);
 
-- 
cgit v1.2.3-24-g4f1b