Launchpad itself

CommercialProjectsVocabulary calls Person.getOwnedProjects which can apparently return projects where the user doesn't have LimitedView

Bug #1688522 reported by Colin Watson
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Launchpad itself
Triaged
Critical
Unassigned

Bug Description

OOPS-f857a6b833873699ec519957794a4c2e shows an attempt to search on Person:+vouchers for a commercial project. The search is done by calling user.getOwnedProjects(), but it then crashes because the user doesn't have launchpad.LimitedView on one of the Product rows that it gets back.

This seems pretty odd to me; I'd thought that ownership should always be sufficient. Perhaps there's something subtle going on with access policies?

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Related questions

Remote bug watches

Bug watches keep track of this bug in other bug trackers.