637
edits
DaveLawrence (talk | contribs) No edit summary |
DaveLawrence (talk | contribs) No edit summary |
||
Line 279: | Line 279: | ||
====Results==== | ====Results==== | ||
# Code is sucessfully patched using the Diff. | # Code is sucessfully patched using the Diff. | ||
=== T14 - Verify the private revisions deliver emails that does not contain any sensitive content === | |||
Your Bugzilla user must belong to a security group, e.g. core-security. | |||
====Test Plan==== | |||
# Login to Phabricator (after creating account in Bugzilla) using an account that can have email delivered to it such as your own email address. | |||
# At the top right of Phabricator, click on your initial or gravatar image drop down menu and select "Settings". | |||
# Click on "Email Delivery". | |||
# Select "Enable Self Action Mail" for the "Self Action" drop down. | |||
# Click "Save Changes". | |||
# Go to bugzilla and create a security bug: | |||
#* Click "Edit Bug", open the "Security" panel, and check one of the security-sensitive boxes, e.g. "Security-Sensitive Core Bug". | |||
# Create a new hg commit. | |||
# Run <code>arc diff .^</code>. | |||
# Enter the title, summary, test plan, and the bug id of the security bug. | |||
# Submit the revision. | |||
====Results==== | |||
# The diff and information of the revision are as expected. | |||
# The revision has a "Custom Policy" attached to it. | |||
# The revision has a "secure-revision" project tag added. | |||
# The revision has a warning titled "This is a secure revision.". | |||
# Check email to see if you received email about the new object (Revision) that was just created. | |||
# The email should not contain any information about the revision other than a link to Phabricator. | |||
# Clicking on the link in the email should take you to the Phabricator page that displays the full unfiltered email contents. | |||
# The email contents should contain the title, summary, test plan, reviewers, etc. of the new revision. | |||
# Submitting a public revision should instead show the full contents in the email similar to what was displayed on the Phabricator mail page. |
edits