Some Launchpad searches containing "deploy" return a "Not Allowed Here" page

Bug #1813801 reported by Daniel Manrique
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Launchpad itself
Triaged
Critical
Unassigned

Bug Description

https://launchpad.net/projects/+index?text=deploy gives a "Not allowed here" page.

other search strings that contain a word that looks like proper english give the same (deployable, deployity) - but not e.g. deployxyz

examples that fail: "is it deployable", "can I deploy".

Examples that work: "juju deploy".

Colin said:

we're obviously failing to do visibility filtering before trying to render the list
I expect there is some private project that matches those search strings

Revision history for this message
Colin Watson (cjwatson) wrote :

PillarNameSet.build_search_query is in fact doing some visibility filtering, so it must not line up properly with the security adapters. Example OOPS: OOPS-1245a2e9331eb80c8824283dda23a6bd

tags: added: 403 disclosure lp-registry oops
Changed in launchpad:
status: New → Triaged
importance: Undecided → Critical
Revision history for this message
Colin Watson (cjwatson) wrote :

The OOPS is essentially the same as bug 1650430.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.