my bugzilla instance doesn't get polluated by referenced used randomly in Tuleap

Site administrator

• For each reference defined by site administrator, site admin can select a list of projects that are allowed to use the given reference (same UI than the one to restrict a plugin or artifact links v2 for instance).
• For a given reference, there is a "restrict" action that lead to the restriction UI (as Gerrit server restriction for instance)

End users

• Once defined, only projects that are allowed to use the reference can use it.
• The bz reference only works within a project
  • For instance when a developer makes a bz reference from a project that is not allowed to use it, the cross ref will not be created (even if the user is member of the project that is allowed).
  • It's the project where the reference is made that is the source of truth

Special behaviours

• At project creation from a template / other project, the new project is not added automatically in the granted list.
• This story will make sure that no comments are added to bugzilla from unexpected projects however the behaviour of the link cannot be decided before implementation. There are 2 options
  • Either the link will exist and point toward the bugzilla instance (then buzilla credentials/permissions will apply)
  • Either no link at all