BugTask target key attributes should not be directly writable

Bug #830803 reported by William Grant
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Launchpad itself
Fix Released
High
William Grant

Bug Description

Security declarations presently permit direct setting of BugTask.{distribution,distroseries,product,productseries,sourcepackagename}. But additional rules and restrictions apply to these, so all writes should go through transitionToTarget.

Most of this was fixed in my LaunchpadTargetWidget-on-BugTaskEditView series, so this should be mostly just changing the security declarations.

Related branches

Revision history for this message
Launchpad QA Bot (lpqabot) wrote :

Fixed in stable r13750 (http://bazaar.launchpad.net/~launchpad-pqm/launchpad/stable/revision/13750) by a commit, but not testable.

tags: added: qa-untestable
Changed in launchpad:
status: In Progress → Fix Committed
William Grant (wgrant)
Changed in launchpad:
status: Fix Committed → Fix Released
Curtis Hovey (sinzui)
tags: added: disclosure target-picker
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.