403 forbidden error when trying to delete a contact

Bug #1214986 reported by Leo Arias
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Ubuntu One Servers
Fix Released
Low
Stephen Stewart

Bug Description

It's not possible to delete contacts from the website. After clicking the delete button and confirming the alert, nothing happens.

Steps to reproduce:

Open the web browser and go to https://one.ubuntu.com/contacts.
Click link Add contact.
Click the title field.
Enter the contact information:
    First name: Test first name.
    Last name: Test last name.
    Email: <email address hidden>.
Click the button Save.
Select the contact Test last name, Test first name, clicking the checkbox next to it.
Click link Delete.
Confirm the deletion.

This is the response:
HTTP/1.1 403 FORBIDDEN
Date: Wed, 21 Aug 2013 15:45:54 GMT
Server: TwistedWeb/12.3.0
Vary: Cookie
Etag: "2ed12f19a3120a808eb8f597cc67e4b7"
X-Bzr-Revision-Number: 7101
Content-Type: text/html
X-Frame-Options: SAMEORIGIN
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked

<!DOCTYPE html>
<html lang="en">
<head>
  <meta http-equiv="content-type" content="text/html; charset=utf-8">
  <meta name="robots" content="NONE,NOARCHIVE">
  <title>403 Forbidden</title>
  <style type="text/css">
    html * { padding:0; margin:0; }
    body * { padding:10px 20px; }
    body * * { padding:0; }
    body { font:small sans-serif; background:#eee; }
    body>div { border-bottom:1px solid #ddd; }
    h1 { font-weight:normal; margin-bottom:.4em; }
    h1 span { font-size:60%; color:#666; font-weight:normal; }
    #info { background:#f6f6f6; }
    #info ul { margin: 0.5em 4em; }
    #info p, #summary p { padding-top:10px; }
    #summary { background: #ffc; }
    #explanation { background:#eee; border-bottom: 0px none; }
  </style>
</head>
<body>
<div id="summary">
  <h1>Forbidden <span>(403)</span></h1>
  <p>CSRF verification failed. Request aborted.</p>

</div>

<div id="explanation">
  <p><small>More information is available with DEBUG=True.</small></p>
</div>

</body>
</html>

Revision history for this message
Leo Arias (elopio) wrote :
Martin Albisetti (beuno)
Changed in ubuntuone-servers:
assignee: Ubuntu One web team (ubuntuone-web) → Stephen Stewart (stephen-stewart)
Changed in ubuntuone-servers:
status: Confirmed → In Progress
Dave Morley (davmor2)
Changed in ubuntuone-servers:
importance: Undecided → Low
Dave Morley (davmor2)
tags: added: u1-contacts
Changed in ubuntuone-servers:
status: In Progress → Fix Committed
Changed in ubuntuone-servers:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.