The current code for linking FAS accounts to rhbz accounts asks for a username/password to verify that the current user is indeed the owner of said account.
Asking users for passwords isn't exactly ideal behavior and it would be better to send a verification link to the email address for verification purposes. Not 100% foolproof but definitely good enough for our purposes.
Metadata Update from @adamwill: - Issue tagged with: enhancement
Bugzilla linking is no more, see #230 , closing
Metadata Update from @kparal: - Issue close_status updated to: Invalid - Issue status updated to: Closed (was: Open)
This issue has been migrated to Fedora Forge: https://forge.fedoraproject.org/quality/blockerbugs/issues/43
Please continue any further discussion there.
Log in to comment on this ticket.