release.files missing on API

[Curtis Hovey]

There is no security checker to view an IProductReleaseFile so the files are not available over the API. security.py needs something like:
class ViewProductReleaseFile(AnonymousAuthorization):
    """Anyone can view an IProductReleaseFile."""
    usedfor = IProductReleaseFile

[Curtis Hovey (sinzui)]

Let me clarify that any logged in user can access the ProductReleaseFile over the API, but anonymous users cannot. Anonymous users can access the file over the web because the page is providing the information.

[Andrew Hutchings (linuxjedi)]

Really? I thought I was logged in when not being able to access it. I could be wrong though.

[Launchpad QA Bot (lpqabot)]

Fixed in stable r11550 <http://bazaar.launchpad.net/~launchpad-pqm/launchpad/stable/revision/11550>.