[From nobody Tue May 26 11:17:20 2026
Received: (at submit) by bugs.debian.org; 13 Feb 2020 16:00:36 +0000
X-Spam-Checker-Version: SpamAssassin 3.4.2-bugs.debian.org_2005_01_02
 (2018-09-13) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-18.9 required=4.0 tests=BAYES_00,DIGITS_LETTERS,
 FOURLA,FROMDEVELOPER,MD5_SHA1_SUM,MURPHY_DRUGS_REL8,RCVD_IN_DNSWL_NONE,
 SPF_HELO_NONE,SPF_NONE,TXREP,XMAILER_REPORTBUG autolearn=ham
 autolearn_force=no version=3.4.2-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 19; hammy, 150; neutral, 90; spammy,
 0. spammytokens: hammytokens:0.000-+--H*M:reportbug,
 0.000-+--H*MI:reportbug, 0.000-+--H*x:reportbug,
 0.000-+--H*UA:reportbug, 0.000-+--H*x:7.5.3
Return-path: <anarcat@debian.org>
Received: from marcos.anarc.at ([206.248.172.91]:46990)
 by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.92) (envelope-from <anarcat@debian.org>) id 1j2Gup-0006aI-82
 for submit@bugs.debian.org; Thu, 13 Feb 2020 16:00:35 +0000
Received: by marcos.anarc.at (Postfix, from userid 1000)
 id C3F3E10E085; Thu, 13 Feb 2020 11:00:31 -0500 (EST)
Received: by curie.anarc.at (Postfix, from userid 1000)
 id C0D27124F43; Thu, 13 Feb 2020 11:00:30 -0500 (EST)
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Antoine Beaupre <anarcat@debian.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: rt 4.4 and later spam owner on permission denied
Message-ID: <158160963073.7644.5024947830842916210.reportbug@curie.anarc.at>
X-Mailer: reportbug 7.5.3~deb10u1
Date: Thu, 13 Feb 2020 11:00:30 -0500
Delivered-To: submit@bugs.debian.org

Source: request-tracker4
Version: 4.4.1-3+deb9u3
Severity: normal
Tags: patch upstream

RT 4.4 and later (shipped in buster) change the behavior of the mail
gateway to noisily warn the owner when it fails to create a ticket or
add a corrspondance because of a permission denied error.

This change was introduced in 4.4.0rc1, in the following commit:

https://github.com/bestpractical/rt/commit/03d0af9a7dfe03ce0f2f86f831bcfe19bb29f5a9#diff-a49d7759c3d37e2923b56ea76a2c62ab

That functionality which the commit log refers to used to be an
*optional* plugin, which was removed in:

https://github.com/bestpractical/rt/commit/d6b673a6e606de4ff74e30a3823401940e2cd465

I think that's a mistake. Since the update, we have started seeing a
lot of spam needlessly bounced to the owner email. The reason behind
this is that our RT admins are allowed to block email addresses from
using RT by ticking off the `Let this user access RT` box in the
user's configuration.

Previously, this would make the user see a bounce when they try to
write RT, which is still the case now. But on top of that, the message
is *also* bounced to admins.

That triggered a copious 23 emails just last night, and I suspect much
more is coming to us.

So I sent a PR upstream to revert the change:

https://github.com/bestpractical/rt/pull/291

Could this be integrated in the Debian package?

Thanks!

-- System Information:
Debian Release: 10.3
  APT prefers stable-debug
  APT policy: (500, 'stable-debug'), (500, 'stable'), (1, 'experimental'), (1, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-8-amd64 (SMP w/4 CPU cores)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=fr_CA.UTF-8, LC_CTYPE=fr_CA.UTF-8 (charmap=UTF-8), LANGUAGE=fr_CA.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
]