> > Manoj Srivastava <[EMAIL PROTECTED]> wrote: > [A big part snipped as I agree to it.] > > > 4. Noone but the maintainer of a package (or someone acting on their > > request) should close its bug reports. > > I'm not sure if this acceptable anymore as we are starting to revive > the qa-team. In some situationt they also need the right to close a bug > report and so we need to make the above statement clearer than now. >
However I have had a bug or three closed by someone else -- for the wrong package. Most recently was an anacron bug that was closed by the ytalk maint. It was an accident, he fixed it the moment I told him, but it should not be possible to do. Now, perhaps a provision that mail from debian-qa that is signed is allowed, but beyond that it is trivial to compromise our bug system currently.