security forum/feed split plan.

[Peter Wolanin]

Based on the DCDC security team BoF and discussions with Gábor and
general sign-off from Heine and other security team members yesterday,
below is a plan that I will carry forward and execute (with your help)
in the coming day or so. The goal of this plan is to more clearly
distinguish core and contrib security issues and make the good record
of Drupal core more apparent. If you feel that there are serious
problems with the plan, please write back as soon as possible.

All existing SAs will be divided among 3 forums:

- Drupal core security advisories
- Contributed project security advisories
- Security public service announcements

Since there are fewer core SAs and PSAs than contrib SAs, we'll make
two new forums for core and PSAs and move the existing forum nodes to
those. It appears that the lists module that is part of the drupalorg
project will support multiple forum tids going to a single list, so
after the topics are moved someone with root access will just need to
edit settings.php to add the new tids to the settings array.

These 2 aliases will be pointed to the new core SA forum tid taxonomy page/feed:
http://drupal.org/security
http://drupal.org/security/rss.xml

We will add new aliases for the other tids like:

http://drupal.org/contrib-security
http://drupal.org/contrib-security/rss.xml
http://drupal.org/security-psa
http://drupal.org/security-psa/rss.xml

All 3 of the taxonomy pages will get the 3 blocks currently on
http://drupal.org/security

For the short term at least, the block at the top left will just
contain links to all 3 pages and feeds. In the longer term, we might
do something more clever like add tabs to the /security page

Probably some minor handbook changes will be needed to reflect this
re-organization.

-Peter
--
Pending work: http://drupal.org/project/issues/documentation/
List archives: http://lists.drupal.org/pipermail/documentation/

[Peter Wolanin]

Initial changes have been completed, though there may need to be some
tweaks to the block content.

-Peter

Post by Peter Wolanin
Based on the DCDC security team BoF and discussions with Gábor and
general sign-off from Heine and other security team members yesterday,
below is a plan that I will carry forward and execute (with your help)
in the coming day or so. The goal of this plan is to more clearly
distinguish core and contrib security issues and make the good record
of Drupal core more apparent. If you feel that there are serious
problems with the plan, please write back as soon as possible.
- Drupal core security advisories
- Contributed project security advisories
- Security public service announcements
Since there are fewer core SAs and PSAs than contrib SAs, we'll make
two new forums for core and PSAs and move the existing forum nodes to
those. It appears that the lists module that is part of the drupalorg
project will support multiple forum tids going to a single list, so
after the topics are moved someone with root access will just need to
edit settings.php to add the new tids to the settings array.
http://drupal.org/security
http://drupal.org/security/rss.xml
http://drupal.org/contrib-security
http://drupal.org/contrib-security/rss.xml
http://drupal.org/security-psa
http://drupal.org/security-psa/rss.xml
All 3 of the taxonomy pages will get the 3 blocks currently on
http://drupal.org/security
For the short term at least, the block at the top left will just
contain links to all 3 pages and feeds. In the longer term, we might
do something more clever like add tabs to the /security page
Probably some minor handbook changes will be needed to reflect this
re-organization.
-Peter

--
Pending work: http://drupal.org/project/issues/documentation/
List archives: http://lists.drupal.org/pipermail/documentation/

[Gábor Hojtsy]

We've got views on d.o.  This seems like a great use for it.  It can handle
all the menu/tab stuff for us, and Views handling of feeds is really nice,
too.  Just make /security/core the default tab at /security, but have tabs
for contrib and announcements and we're done.  I could help with this if
necessary.

It would be good to make up a Views based solution for doing these
"right sidebar filter arrows" as done on the redesigned news page (and
as discussed with Mark will be done on the jobs and events page as
well): http://drupal.markboultondesign.com/iteration11/news.html I
imagine the security page would use these kind of filter arrows as
well in the redesign, since the same concept applies.

Gábor
--
Pending work: http://drupal.org/project/issues/documentation/
List archives: http://lists.drupal.org/pipermail/documentation/

[Gábor Hojtsy]

Post by Peter Wolanin
http://drupal.org/security
http://drupal.org/security/contrib
http://drupal.org/security/psa
Interested readers can see http://drupal.org/node/398484 for the gory
details.

Ok, looks like we need a front page announcement and/or PSA about this.

Gábor
--
Pending work: http://drupal.org/project/issues/documentation/
List archives: http://lists.drupal.org/pipermail/documentation/