non-public email address shown after merge request

Bug #419930 reported by steindani
256
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Launchpad itself
Fix Released
High
Brad Crittenden

Bug Description

If you give somebody's Launchpad ID at the https://launchpad.net/people/+requestmerge page, it shows his or her email address, even if it's hidden.

Related branches

steindani (steindani)
visibility: private → public
steindani (steindani)
description: updated
Curtis Hovey (sinzui)
affects: launchpad → launchpad-registry
Changed in launchpad-registry:
importance: Undecided → High
status: New → Triaged
Curtis Hovey (sinzui)
Changed in launchpad-registry:
milestone: none → 10.01
Brad Crittenden (bac)
Changed in launchpad-registry:
status: Triaged → In Progress
assignee: nobody → Brad Crittenden (bac)
Revision history for this message
Brad Crittenden (bac) wrote :

Screenshot for proposed fix
Merge page for duplicate account with visible email

Revision history for this message
Brad Crittenden (bac) wrote :

Screenshot for proposed fix
Merge confirmation page for duplicate account with visible email

Revision history for this message
Brad Crittenden (bac) wrote :

Screenshot for proposed fix
Merge page for duplicate account with hidden email

Revision history for this message
Brad Crittenden (bac) wrote :

Screenshot for proposed fix
Merge confirmation page for duplicate account with hidden email

Revision history for this message
Curtis Hovey (sinzui) wrote :

Fixed in launchpad devel r10173.

Changed in launchpad-registry:
status: In Progress → Fix Committed
Curtis Hovey (sinzui)
Changed in launchpad-registry:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.