Permission errors should be more descriptive

Bug #3766 reported by Jorge Bernal
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Launchpad itself
Triaged
Low
Unassigned

Bug Description

If I go to https://launchpad.net/sprints/ubz/+attend I got an error:

Sorry, you don't have permission to access this page.

You are logged in as Jorge Bernal.

This is too generic. If I'm not allowed to do that, I'd like to know why.
A message like "You can't register your attendance because you are not a member of ubzrs-team" would be more appropiate.

Revision history for this message
Dafydd Harries (daf) wrote :

Hmm, this would require some changes to the permissions system. I think if we could attach a message to an action protected by a permission so that that message gets displayed when the permission is not met (excuse my terminology abuse), then that would address the problem.

Changed in launchpad:
assignee: nobody → stevea
status: New → Accepted
Revision history for this message
Steve Alexander (stevea) wrote :

There is some security refactoring coming up (oddly enough for some speed optimisation) that will allow us to say what teams or roles you need to be in / have to do that thing. This will help explain why a particular action or page is not allowed.

Curtis Hovey (sinzui)
Changed in launchpad-foundations:
assignee: Steve Alexander (stevea) → nobody
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.