Hiding one's location removes ability for non-admins to export conferences that one attends

Bug #272355 reported by William Grant
2
Affects Status Importance Assigned to Milestone
Launchpad itself
Fix Released
High
Guilherme Salgado

Bug Description

If I add myself to a sprint and hide my location, the driver of the sprint can no longer export a CSV of attendees (unless they are an ~admin or me). An appropriate permissions check seems to be done for email addresses, but apparently not for timezones. Without a traceback there is no way to identify which Person caused the issue, and there's no way to remove them anyway.

Tags: lp-registry
Changed in launchpad-foundations:
assignee: nobody → salgado
importance: Undecided → High
milestone: none → 2.1.10
status: New → Triaged
Changed in launchpad-foundations:
status: Triaged → In Progress
Curtis Hovey (sinzui)
Changed in launchpad-foundations:
milestone: 2.1.10 → none
Changed in launchpad-registry:
milestone: none → 2.1.10
Revision history for this message
Guilherme Salgado (salgado) wrote :

mainline r7074

Changed in launchpad-registry:
status: In Progress → Fix Committed
Changed in launchpad-registry:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.