Change Details

There is a problem with Differential: anyone can create a diff and a revision and there is no {nav Default Edit Policy} for revisions, so on installs where task creation and editing are restricted, spammers will target Differential revisions and may create trash diffs. That's why it would be nice to add the ability to change the {nav Default Edit Policy} for Differential revisions as well as restricting who can create diffs (for revisions) by adding a {nav Can Create Diffs} policy. An example use case would be to restrict the ability to create diffs and edit revisions to #community on this install. A similar approach to {nav Can Create Diffusion Repositories} and {nav Default Diffusion Repository Edit Policy} can be used to implement the aforementioned policies for Differential. For now, a global Herald rule blocking unauthorized users from editing revisions is the best way to restrict their ability to edit revisions. The same goes for creating diffs.

== The Root Problem == Anyone who can use Differential can create a diff and a revision and there is no {nav Default Edit Policy} for revisions, so on installs where task creation and editing are restricted, spammers will target Differential revisions and may create trash diffs. == The Solution == That's why it would be nice to add the ability to change the {nav Default Edit Policy} for Differential revisions as well as restricting who can create diffs (for revisions) by adding a {nav Can Create Diffs} policy. An example use case would be to restrict the ability to create diffs and edit revisions to #community on this install. A similar approach to {nav Can Create Diffusion Repositories} and {nav Default Diffusion Repository Edit Policy} can be used to implement the aforementioned policies for Differential. NOTE: For now, a global Herald rule blocking unauthorized users from creating diffs is what can act as a temporary {nav Can Create Diffs} policy. == The Benefit == - **Can Create Diffs**: Prevent possible spammers from creating diffs that would be difficult to abandon if `differential.always-allow-abandon` is set to false - **Default Edit Policy**: Prevent spammers from vandalizing on revision titles, tags, subscribers, summary, test/revert plan, blame rev, etc.

There is a p== The Root Problem with== Anyone who can use Differential: anyone can create a diff and a revision and there is no {nav Default Edit Policy} for revisions, so on installs where task creation and editing are restricted, spammers will target Differential revisions and may create trash diffs. == The Solution == That's why it would be nice to add the ability to change the {nav Default Edit Policy} for Differential revisions as well as restricting who can create diffs (for revisions) by adding a {nav Can Create Diffs} policy. An example use case would be to restrict the ability to create diffs and edit revisions to #community on this install. A similar approach to {nav Can Create Diffusion Repositories} and {nav Default Diffusion Repository Edit Policy} can be used to implement the aforementioned policies for Differential. For nowNOTE: For now, a global Herald rule blocking unauthorized users from creating diffs is what can act as a temporary {nav Can Create Diffs} policy. == The Benefit == - **Can Create Diffs**: Prevent possible spammers from creating diffs that would be difficult to abandon if `differential.always-allow-abandon` is set to false - **Default Edit Policy**: Prevent spammers from vandalizing on revision titles, tags, subscribers, summary, test/revert plan, a global Herald rule blocking unauthorized users from editing revisions is the best way to restrict their ability to edit revisions.blame rev, The same goes for creating diffsetc.