Unobvious "Not a branch" when lp: url resolves to https for a private branch

Bug #251956 reported by Marc Tardif
2
Affects Status Importance Assigned to Milestone
Bazaar
Confirmed
Medium
Unassigned

Bug Description

I'm using Bazaar (bzr) 1.3.1 and I'm trying to branch an existing project which happens to be private from Launchpad:

 bzr branch lp:~hardware-certification/hwtest-certify/trunk
 bzr: ERROR: Not a branch: "https://code.launchpad.net/".

The problem is simply that I did not call launchpad-login but the error message should be more obvious.

Revision history for this message
Martin Albisetti (beuno) wrote :

This has been fixed in bzr 1.5+

Changed in bzr:
status: New → Invalid
Revision history for this message
John A Meinel (jameinel) wrote :

Martin, I don't think it has been fixed for private branches.

The problem is that we can't really tell whether a branch exists or not if it is private and you haven't logged in.

The whole point of private branches on LP is that you shouldn't know whether they exist or not. (Otherwise you can try common names and see if something is secretly going on.) Right now there is already a bit of a security leak, in that if you browse to a "private" project, you get a 403 "Not Authorized" rather than a "404".

So I guess I don't really know what LP's official stance on private objects is. Are they meant to be completely hidden?

Revision history for this message
John A Meinel (jameinel) wrote :

Re-opening because this is about *private* branches, not just about the error message.

Although I do get this:
$ bzr branch lp:~hardware-certification/hwtest-certify/trunk
You have not informed bzr of your launchpad login. If you are attempting a
write operation and it fails, run "bzr launchpad-login YOUR_ID" and try again.
bzr: ERROR: Not a branch: "https://code.launchpad.net/".

The location is all wrong, and the *reason* for asking you to log-in is a bit bogus. But I suppose it does convey that to get access to your private branch you need to login.

I suppose we could put this as Fix Released if we feel that error message is good enough.

Changed in bzr:
importance: Undecided → Medium
status: Invalid → Triaged
Martin Pool (mbp)
summary: - Unobvious error message before calling launchpad-login
+ Unobvious "Not a branch" when lp: url resolves to https for a private
+ branch
Jonathan Lange (jml)
tags: added: lp-directory lp-login
Jonathan Lange (jml)
tags: added: lpurl
removed: lp-directory
Martin Pool (mbp)
Changed in bzr:
status: Triaged → Confirmed
Jelmer Vernooij (jelmer)
tags: added: check-for-breezy
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.