Permissions for editing bug branch links is too permissive
Bug #138805 reported by
Tim Penhey
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Launchpad itself |
Invalid
|
Medium
|
Tim Penhey |
Bug Description
Currently almost anyone is able to edit the status and whiteboard of a bug-branch link.
This should really be restricted somewhat.
As a suggestion I'd say the branch owner and the project bug contacts should be able to change the status (or delete it).
Changed in launchpad-bazaar: | |
assignee: | nobody → thumper |
importance: | Undecided → Medium |
status: | New → Confirmed |
To post a comment you must log in.
Permission to change and delete should be the same as permission to create.
I believe that currently, any user is allowed to create a bug-branch link.
So the permission to create bug-branches should be modified accordingly.