Hey! That profile/product/project/distribution belongs to me!
Bug #43741 reported by
Matthew Paul Thomas
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| Launchpad itself |
Triaged
|
Low
|
Unassigned | ||
Bug Description
In some circumstances, Launchpad creates profiles for people who haven't used it at all. Profiles can be merged, but it's not obvious how to do this.
Launchpad also lets anyone register a product, project, regardless of whether the person is actually involved in the software they've described. This could trick people into exposing security bugs to someone who shouldn't see them.
To fix this, the pages for people, products, projects, and distributions should have some discreet but obvious way of saying "hey! this belongs to me!". For profiles, this would go to the account merging interface; for software, it would offer a form to notify Launchpad admins of the issue.
| description: | updated |
| Changed in launchpad: | |
| status: | Unconfirmed → Confirmed |
Revision history for this message
| Joey Stanford (joey) wrote | #1 |
| affects: | launchpad-foundations → launchpad-registry |
| Changed in launchpad-registry: | |
| importance: | Medium → Low |
| tags: | added: projects teams users |
To post a comment you must log in.
So we have this for people for unclaimed accounts. For existing accounts folks use the lost password.
However for products and project groups, we don't and this involves a LP admin request.