| 2010-11-25 12:42:54 |
Damien Raude-Morvan |
bug |
|
|
added bug |
| 2010-11-25 15:22:39 |
Gavin Panella |
launchpad: status |
New |
Incomplete |
|
| 2010-11-25 21:56:22 |
Curtis Hovey |
summary |
Abuse of "Merge of Accounts" |
Do let users try to merge teams into people |
|
| 2010-11-25 21:56:29 |
Curtis Hovey |
visibility |
private |
public |
|
| 2010-11-25 21:56:29 |
Curtis Hovey |
security vulnerability |
yes |
no |
|
| 2010-11-25 21:56:36 |
Curtis Hovey |
affects |
launchpad |
launchpad-registry |
|
| 2010-11-25 21:56:58 |
Curtis Hovey |
launchpad-registry: importance |
Undecided |
Low |
|
| 2010-11-25 21:56:58 |
Curtis Hovey |
launchpad-registry: status |
Incomplete |
Triaged |
|
| 2010-11-25 22:00:21 |
Curtis Hovey |
description |
Hi,
I'm member of Debian Java Team. We have received the following "merge request" on our public mailing list :
-------------------------
We received a request to merge the Launchpad account named
'Debian Java Maintainers (pkg-java-maintainers)' -- which have registered the email address
'pkg-java-maintainers@lists.alioth.debian.org' -- into the account named 'tarcisio-sousa'.
-------------------------
I don't know how we can deal with this but it's clearly an abuse of merge account feature.
Cheers, |
Launchpad lets user attempt to merge teams into user user profiles. Only Lp registry admin can do this. The form should not imply users can do this, nor should it scare the member of the team.
ORIGINAL MESSAGE:
I'm member of Debian Java Team. We have received the following "merge request" on our public mailing list :
-------------------------
We received a request to merge the Launchpad account named
'Debian Java Maintainers (pkg-java-maintainers)' -- which have registered the email address
'pkg-java-maintainers@lists.alioth.debian.org' -- into the account named 'tarcisio-sousa'.
-------------------------
I don't know how we can deal with this but it's clearly an abuse of merge account feature.
|
|
| 2010-11-25 22:00:31 |
Curtis Hovey |
tags |
|
merge-deactivate |
|
| 2011-06-14 13:46:03 |
Francis J. Lacoste |
removed subscriber Launchpad Security |
|
|
|
| 2012-12-03 15:27:08 |
Curtis Hovey |
summary |
Do let users try to merge teams into people |
Do not let users try to merge teams into people |
|
