Page History

...

Upon a successful vote, send an invite to the person (text below). If the invitation is accepted, grant the person's Bugzilla account with the 'EditBugs', 'HasCla', and 'Security' group permissions. This is done by following the "Users" link in Bugzilla, specifying the account by email address, clicking on the correct username, scrolling to "Group Access" and ticking the appropriate checkboxes. Ask the person to subscribe to the security mailing list, and approve their subscription request.

Then, ask infra to set up an apache.org account: https://www.apache.org/dev/pmc.html#newcommitter . The UNIX group to request is "spamassassin".

...