/projects page is forbidden when a private team is listed
Bug #911794 reported by
Marc Tardif
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| Launchpad itself |
Fix Released
|
High
|
Curtis Hovey | ||
Bug Description
Recently, https:/
< stub> Projects lists 'latest teams', and should be hiding private teams you shouldn't be able to see rather than making the page fail
Revision history for this message
| Curtis Hovey (sinzui) wrote | #1 |
| tags: | added: 403 disclosure teams |
| Changed in launchpad: | |
| status: | New → Triaged |
| importance: | Undecided → High |
| summary: |
- /projects page now returns forbidden + /projects page is forbidden when a private team is listed |
| Changed in launchpad: | |
| assignee: | nobody → Curtis Hovey (sinzui) |
| status: | Triaged → In Progress |
Revision history for this message
| Launchpad QA Bot (lpqabot) wrote | #2 |
| tags: | added: qa-needstesting |
| Changed in launchpad: | |
| status: | In Progress → Fix Committed |
| tags: |
added: qa-ok removed: qa-needstesting |
| Changed in launchpad: | |
| status: | Fix Committed → Fix Released |
| tags: | added: hardening |
To post a comment you must log in.
There is a private team in the list, it should not be.