Can see other people's application submissions

Bug #1017387 reported by Matthew Paul Thomas
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Developer registration portal
New
Undecided
Unassigned

Bug Description

1. Go to <https://myapps.developer.ubuntu.com/dev/apps/782/>.

What you see:
* "Details for 'Unity Buss'."
* "Submitted by Malin Krosby Bruland on 2012-04-19 12:38 - 2 months ago"
* "Department you have chosen:"
* "Back to your applications"

What you should see:
* A 403 error, ideally with appropriate links to get started on submitting your own application.

You shouldn't be able to access other people's submission pages, for a variety of reasons:
* Developers may want their submissions to be a surprise.
* The "Buy" button doesn't work.
* Much of the text assumes that the reader is the submitter.
* It risks myapps. competing with the Web directory for in Web search results.

Revision history for this message
Andrew Mitchell (ajmitch) wrote :

From what I know, this was intended for free software submissions, and lets the ARB have people help out with reviewing the packages without having the ability to change the submission state, as the ~ubuntu-app-review-contributors can do.

Revision history for this message
Matthew Paul Thomas (mpt) wrote :

> * It risks myapps. competing with the Web directory

I wasn't expecting this to start happening so fast. In <http://www.omgubuntu.co.uk/2012/07/timezone-sorting-added-to-ubuntu-12-10-clock-applet#comment-589205934>, an app developer promotes their application by linking to its myapps submission page.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.