Non-admin team member can make the team a bug/answer contact

Bug #109652 reported by Matthew Paul Thomas
8
Affects Status Importance Assigned to Milestone
Launchpad itself
Fix Released
Critical
Francis J. Lacoste

Bug Description

It is currently possible for any member of a team to make that team a bug contact or an answer contact. At least once this has caused grief, most recently when an unknown Ubuntu Bugsquad member made that team an answer contact for Ubuntu.

Only team admins should have the power to add the team as a bug or answer contact. This probably also means that only team admins should have the power to remove the team as an answer contact, a reversal of the change made for bug 68732.

description: updated
Revision history for this message
Francis J. Lacoste (flacoste) wrote :

This is causing problems, a user just registered 5 teams (including the Launchpad Beta Team and Ubuntu BugSquad) as answer contacts for Ubuntu. We disabled team registration in production until this bug is fixed.

Changed in launchpad-answers:
assignee: nobody → flacoste
importance: Undecided → Critical
status: Unconfirmed → Confirmed
Changed in malone:
status: Unconfirmed → Confirmed
Changed in launchpad-answers:
status: Confirmed → In Progress
Revision history for this message
Francis J. Lacoste (flacoste) wrote :

Fixed in RF 4204.

Changed in launchpad-answers:
status: In Progress → Fix Committed
Revision history for this message
Francis J. Lacoste (flacoste) wrote :

Fix was cherry-picked today.

Changed in launchpad-answers:
status: Fix Committed → Fix Released
Revision history for this message
Björn Tillenius (bjornt) wrote :

Marking high since it can cause a lot of e-mail to be sent to a team.

Changed in malone:
assignee: nobody → gmb
importance: Undecided → High
Graham Binns (gmb)
Changed in malone:
status: Confirmed → In Progress
Revision history for this message
Graham Binns (gmb) wrote :

Fix in review

Graham Binns (gmb)
Changed in malone:
status: In Progress → Fix Committed
Graham Binns (gmb)
Changed in malone:
status: Fix Committed → Fix Released
Revision history for this message
Christian Reis (kiko) wrote :

What revision was this fixed in?

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.