From 550a798284238af70960c8b4ab4fe276f40a9cbb Mon Sep 17 00:00:00 2001
From: David Lawrence <dkl@mozilla.com>
Date: Tue, 3 Jan 2017 14:45:51 +0000
Subject: Bug 1262465 - ensure unprivileged users can mark a bug as security
 sensitive

---
 .../template/en/default/bug_modal/groups.html.tmpl       | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

(limited to 'extensions/BugModal/template/en/default/bug_modal/groups.html.tmpl')

diff --git a/extensions/BugModal/template/en/default/bug_modal/groups.html.tmpl b/extensions/BugModal/template/en/default/bug_modal/groups.html.tmpl
index 8315f2355..d60d1ef67 100644
--- a/extensions/BugModal/template/en/default/bug_modal/groups.html.tmpl
+++ b/extensions/BugModal/template/en/default/bug_modal/groups.html.tmpl
@@ -43,11 +43,25 @@
       </ul>
     [% END %]
   [% ELSE %]
-    This [% terms.bug %] is publicaly visible.
+    This [% terms.bug %] is publicly visible.
   [% END %]
 </div>
 
 <div class="groups edit-show" style="display:none">
+  [% UNLESS bug.in_group(bug.product_obj.default_security_group_obj)
+     || user.in_group(bug.product_obj.default_security_group)
+     || (user.id != bug.reporter.id && !user.in_group('editbugs')) %]
+    <div>
+      <input type="checkbox" name="groups"I class="restrict_sensitive"
+             value="[% bug.product_obj.default_security_group FILTER none %]"
+             id="group_[% bug.product_obj.default_security_group_obj.id FILTER html %]">
+      <label for="group_[% bug.product_obj.default_security_group_obj.id FILTER html %]"
+             title="This [% terms.bug %] is security sensitive and should be hidden from the public until it is resolved">
+        Restrict access to this [% terms.bug %]
+      </label>
+    </div>
+  [% END %]
+
   [% emitted_description = 0 %]
   [% FOREACH group IN bug.groups %]
     [% IF NOT emitted_description %]
-- 
cgit v1.2.3-24-g4f1b