BugTask target key attributes should not be directly writable

Bug #830803 reported by William Grant on 2011-08-22
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Launchpad itself
High
William Grant

Bug Description

Security declarations presently permit direct setting of BugTask.{distribution,distroseries,product,productseries,sourcepackagename}. But additional rules and restrictions apply to these, so all writes should go through transitionToTarget.

Most of this was fixed in my LaunchpadTargetWidget-on-BugTaskEditView series, so this should be mostly just changing the security declarations.

Related branches

Launchpad QA Bot (lpqabot) wrote :

Fixed in stable r13750 (http://bazaar.launchpad.net/~launchpad-pqm/launchpad/stable/revision/13750) by a commit, but not testable.

tags: added: qa-untestable
Changed in launchpad:
status: In Progress → Fix Committed
William Grant (wgrant) on 2011-08-25
Changed in launchpad:
status: Fix Committed → Fix Released
Curtis Hovey (sinzui) on 2012-07-12
tags: added: disclosure target-picker
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers