Team memberships in private team exposed

Bug #297996 reported by William Grant
252
Affects Status Importance Assigned to Milestone
Launchpad itself
Fix Released
High
Barry Warsaw

Bug Description

In their usual team participation lists, I can see that ~launchpad and ~launchpad's members are members of ~canonical-javascripters. ~canonical-javascripters is a private team, and has no members known by Google apart from ~launchpad and those who inherit it from ~launchpad. This seems to be a bug.

Tags: lp-registry
William Grant (wgrant)
description: updated
Revision history for this message
Curtis Hovey (sinzui) wrote :

This bug should be closed by the work to obfuscate private team names in the near future.

Changed in launchpad-registry:
assignee: nobody → bac
importance: Undecided → High
status: New → Triaged
Curtis Hovey (sinzui)
Changed in launchpad-registry:
milestone: none → 2.2.2
Barry Warsaw (barry)
Changed in launchpad-registry:
assignee: bac → barry
status: Triaged → In Progress
Barry Warsaw (barry)
Changed in launchpad-registry:
milestone: 2.2.2 → 2.2.1
status: In Progress → Fix Committed
Barry Warsaw (barry)
Changed in launchpad-registry:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.