Comment 10 for bug 1554288

Revision history for this message
Stuart McLaren (stuart-mclaren) wrote :

If you have a rogue admin on your network I think there is much greater scope for malicious activity than just filling up the database with bogus records.

If possible, I agree it would be better if the registry rejected requests that created new image records that can't be deleted via the API.

(It's not strictly true that those records can't be deleted by an admin. They can be deleted by accessing the database directly.)