CommercialProjectsVocabulary calls Person.getOwnedProjects which can apparently return projects where the user doesn't have LimitedView
Bug #1688522 reported by
Colin Watson
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Launchpad itself |
Triaged
|
Critical
|
Unassigned |
Bug Description
OOPS-f857a6b833873699ec519957794a4c2e shows an attempt to search on Person:+vouchers for a commercial project. The search is done by calling user.getOwnedPr
This seems pretty odd to me; I'd thought that ownership should always be sufficient. Perhaps there's something subtle going on with access policies?
To post a comment you must log in.