project-registry.txt test using wrong permissions

[Brad Crittenden]

Even when using an authenticated user who should have permission, attributes that are protected cannot be seen. Write access is denied for all attributes.

The following should work but instead gives the 'redacted' message:

    >>> lp_mark = launchpadlib_for(
    ... 'launchpadlib test', 'mark', 'READ_PRIVATE')
    >>> print lp_mark.me.name
    mark
    >>> firefox = lp_mark.projects['firefox']
    >>> print firefox.license_reviewed
    False

The test lp/registry/doc/launchpadlib/project-registry.txt.disabled should work when this problem is resolved.

[Leonard Richardson (leonardr)]

The permission necessary for viewing the 'license_reviewed' field is ProjectReview. This permission is not available to an OAuth token with READ_PRIVATE access, because having it also gives you the ability to review projects.

So, the problem is with the Launchpad permissions, not with launchpadlib or the test setup. license_reviewed should have separate read and write permissions--maybe View for read and ProjectReview for write? Or do we really want to hide the review status from people who don't have review permission? In which case the current behavior is correct--the lack of write access will also prohibit certain reads.

There are probably a lot of these problems, but we haven't been doing a whole lot of work with launchpadlib clients that have limited access, so we just started noticing them.

[Leonard Richardson (leonardr)]

As a workaround, you could grant your user WRITE_PRIVATE access. That should make the test work

[Gary Poster (gary)]

Marked as Invalid for launchpad-foundations and added launchpad-code so thumper could decide if he wanted to do anything about it.

[Tim Penhey (thumper)]

Surely this is a registry issue, not code?