Linking a private project to an ubuntu source package breaks Ubuntu

Bug #1063297 reported by Curtis Hovey
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Launchpad itself
Fix Released
High
Aaron Bentley

Bug Description

I can accidentally type the name of a private project when linking a package to a project, and I will get an Unauthorized error. If the project is shared with me, I can link the package to Ubuntu, breaking the ubuntu series, DSP and SP pages. From the private project's packaging page, i can link it to a source package.

Private projects cannot be linked to a package. The vocabularies cannot ever permit a private projects to be in this kind of relationship. The project packaging packages should not exist, or if they do, they need to be disabled.

Related branches

Aaron Bentley (abentley)
Changed in launchpad:
assignee: nobody → Aaron Bentley (abentley)
status: Triaged → In Progress
Revision history for this message
Launchpad QA Bot (lpqabot) wrote :
tags: added: qa-needstesting
Changed in launchpad:
status: In Progress → Fix Committed
Aaron Bentley (abentley)
tags: added: qa-ok
removed: qa-needstesting
Changed in launchpad:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.