Recipe security declarations need to be restricted to launchpad.View

Bug #593221 reported by William Grant
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Launchpad itself
Fix Released
High
Paul Hummer

Bug Description

All SourcePackageRecipeBuilds are currently public, since access is permitted through an <allow> directive. Now we have a correct launchpad.View adapter, the <allow> should be replaced with a <require permission="launchpad.View>, so users can't see builds to private archives that they can't see.

Related branches

Tim Penhey (thumper)
tags: added: recipe
Changed in launchpad-code:
status: New → Triaged
importance: Undecided → High
Paul Hummer (rockstar)
Changed in launchpad-code:
assignee: nobody → Paul Hummer (rockstar)
milestone: none → 10.07
status: Triaged → In Progress
Revision history for this message
Paul Hummer (rockstar) wrote :

Playing in ec2.

Revision history for this message
Paul Hummer (rockstar) wrote :

Fixed in devel 11194

Changed in launchpad-code:
status: In Progress → Fix Committed
Revision history for this message
Launchpad QA Bot (lpqabot) wrote : Bug fixed by a commit
tags: added: qa-needstesting
Paul Hummer (rockstar)
tags: added: qa-ok
removed: qa-needstesting
Changed in launchpad-code:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.