title: How to restrict group visibility rights inside a product in bugzilla
body: <p>Like the person in <a href="https://stackoverflow.com/questions/3102850/basic-permission-in-bugzilla-to-separate-clients">"separate clients question"</a> I am trying to define "clients" groups within our bugzilla instance. The difference is in the visibility within a particular product. We would like to:</p>
  
  <ul>
  <li>have each group of client only see its project and not the other projects (this is the requirement already answered by the question above),</li>
  <li>have the possibility for each project to have bugs filled either by internal people or by the clients,</li>
  <li>bugs filled by clients are seen by other clients (of the same group of course) and by internals,</li>
  <li><em>by default</em> bugs filled by internals are also seen by the client group and by internals, but it is possible for the internal accounts to check a box restricting the visibility to only internal.</li>
  </ul>
  
  <p>I tried to google/groups this but the requirements seem a bit unusual. Also I am confident that it should be possible with the MemberControl/OtherControl options <a href="http://www.bugzilla.org/docs/3.4/en/html/products.html#product-group-controls" rel="nofollow noreferrer">explained here</a>. But I can't figure them out. The options I tried were either two restrictive (Mandatory/Mandatory) or not enough (Default/NA for the internal group but then the bug became public, hence the other client groups could see it).</p>
  
  <p>Thanks in advance for your help.</p>
  
  <p>Cheers,<br>
  Christophe.</p>