Non-admin team member can make the team a bug/answer contact
Bug #109652 reported by
Matthew Paul Thomas
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Launchpad itself |
Fix Released
|
Critical
|
Francis J. Lacoste |
Bug Description
It is currently possible for any member of a team to make that team a bug contact or an answer contact. At least once this has caused grief, most recently when an unknown Ubuntu Bugsquad member made that team an answer contact for Ubuntu.
Only team admins should have the power to add the team as a bug or answer contact. This probably also means that only team admins should have the power to remove the team as an answer contact, a reversal of the change made for bug 68732.
description: | updated |
Changed in malone: | |
status: | Unconfirmed → Confirmed |
Changed in launchpad-answers: | |
status: | Confirmed → In Progress |
Changed in malone: | |
status: | Confirmed → In Progress |
Changed in malone: | |
status: | In Progress → Fix Committed |
Changed in malone: | |
status: | Fix Committed → Fix Released |
To post a comment you must log in.
This is causing problems, a user just registered 5 teams (including the Launchpad Beta Team and Ubuntu BugSquad) as answer contacts for Ubuntu. We disabled team registration in production until this bug is fixed.