| 2009-01-13 14:28:03 |
Fabien Tassin |
bug |
|
|
added bug |
| 2009-01-13 14:29:13 |
Fabien Tassin |
description |
Anyone could modify the whiteboard of a branch hosted on LP.
It is a security issue. Only the owner/team should be able to do that.
Worse, the email sent to the owner(s) after the change doe not contain a diff exposing the changes so it's not easy to check what has just been changed. |
Anyone could modify the whiteboard of a branch hosted on LP.
It is a security issue. Only the owner/team should be able to do that.
Worse, the email sent to the owner(s) after the change does not contain a diff exposing the changes so it's not easy to check what has just been changed. |
|
| 2009-01-13 14:34:28 |
Julian Edwards |
malone: bugtargetdisplayname |
Launchpad Bugs |
Launchpad itself |
|
| 2009-01-13 14:34:28 |
Julian Edwards |
malone: bugtargetname |
malone |
launchpad |
|
| 2009-01-13 14:34:28 |
Julian Edwards |
malone: statusexplanation |
|
|
|
| 2009-01-13 14:34:28 |
Julian Edwards |
malone: title |
Bug #316773 in Launchpad Bugs: "branch whiteboards should be editable only by their owners" |
Bug #316773 in Launchpad itself: "branch whiteboards should be editable only by their owners" |
|
| 2009-01-13 16:37:28 |
Ursula Junque |
launchpad: bugtargetdisplayname |
Launchpad itself |
Launchpad Bazaar Integration |
|
| 2009-01-13 16:37:28 |
Ursula Junque |
launchpad: bugtargetname |
launchpad |
launchpad-bazaar |
|
| 2009-01-13 16:37:28 |
Ursula Junque |
launchpad: title |
Bug #316773 in Launchpad itself: "branch whiteboards should be editable only by their owners" |
Bug #316773 in Launchpad Bazaar Integration: "branch whiteboards should be editable only by their owners" |
|
| 2009-02-05 03:15:07 |
Jonathan Lange |
launchpad-bazaar: status |
New |
Won't Fix |
|
| 2009-02-05 03:15:07 |
Jonathan Lange |
launchpad-bazaar: statusexplanation |
|
The point of whiteboards is that anyone can edit them.
If you want to store important information about your branches, your best bet is to edit the description field. |
|
| 2009-02-05 09:22:12 |
Fabien Tassin |
who_made_private |
fta |
|
|
| 2009-02-05 21:49:46 |
Jonathan Lange |
launchpad-bazaar: status |
Won't Fix |
Incomplete |
|
| 2009-02-05 21:49:46 |
Jonathan Lange |
launchpad-bazaar: statusexplanation |
The point of whiteboards is that anyone can edit them.
If you want to store important information about your branches, your best bet is to edit the description field. |
I'm always happy to reconsider decisions :)
My questions are:
- how are you using the whiteboard such that reliably controlling it becomes a pressing need?
- why not use the description?
I would also like to know what the policy is for other whiteboards in Launchpad, but that's something I can chase up myself.
|
|
| 2009-02-13 00:02:32 |
Jonathan Lange |
launchpad-bazaar: status |
Incomplete |
Triaged |
|
| 2009-02-13 00:02:32 |
Jonathan Lange |
launchpad-bazaar: importance |
Undecided |
Low |
|
| 2009-02-13 00:02:32 |
Jonathan Lange |
launchpad-bazaar: statusexplanation |
I'm always happy to reconsider decisions :)
My questions are:
- how are you using the whiteboard such that reliably controlling it becomes a pressing need?
- why not use the description?
I would also like to know what the policy is for other whiteboards in Launchpad, but that's something I can chase up myself.
|
- We should restrict this for now, to reduce spam.
- Contact Any User deals with many of the use-cases that whiteboards deal with
- Whiteboard requiring owner privs to edit is redundant with a description requiring owner privs to edit.
- Ideally, we'd have a wikified field with versioning, or a thread based comment system |
|
| 2009-06-09 02:55:30 |
Tim Penhey |
launchpad-code: status |
Triaged |
Invalid |
|
| 2012-08-09 23:48:32 |
William Grant |
removed subscriber Launchpad Security |
|
|
|
