Comment 2 for bug 251956
Revision history for this message
| John A Meinel (jameinel) wrote Re: Unobvious error message before calling launchpad-login | #2 |
© 2004
Canonical Ltd.
•
Terms of use
•
Data privacy
•
Contact Launchpad Support
•
Blog
•
Careers
•
System status
•
9199653
demo site
(Get the code!)
Martin, I don't think it has been fixed for private branches.
The problem is that we can't really tell whether a branch exists or not if it is private and you haven't logged in.
The whole point of private branches on LP is that you shouldn't know whether they exist or not. (Otherwise you can try common names and see if something is secretly going on.) Right now there is already a bit of a security leak, in that if you browse to a "private" project, you get a 403 "Not Authorized" rather than a "404".
So I guess I don't really know what LP's official stance on private objects is. Are they meant to be completely hidden?