Determine if the majority of sfx ticket permissions can be transfered over to allura. Perhaps with some tickets going into a general tracker and others going into a private tracker as in allura project (to preserve the privacy of security issues.)
If necessary evaluate the cost of adding a subtractive permission bit for allura to support more of the sfx tracker ticket permissions.
To handle migrations, my recommendation is to add full ACLs with ALLOW and DENY to artifacts [#1909]. Keeping private tickets in a private ticket tracker would be sufficient to migrate existing tickets, but would be a step back in functionality, as tickets couldn't be 'private-ized' as they can now. Once full ACLs are implemented, we can mimic the 'private ticket' option by adding a 'private' checkbox which adds the following ACL to the ticket [#1940]:
This should be sufficiently close to what a private ticket does now. I'd estimate that once the ACL support is in place, adding a private flag to tickets should be a '2', with the ACL support being a '4'.
Related
Tickets:
#1909Tickets:
#1940