Comment 1 for bug 1917469
Revision history for this message
| Abhishek Kekane (abhishek-kekane) wrote | #1 |
© 2004
Canonical Ltd.
•
Terms of use
•
Data privacy
•
Contact Launchpad Support
•
Blog
•
Careers
•
System status
•
9199653
demo site
(Get the code!)
IMO image deactivation should be strictly admin operation only.
By design once image is deactivated then only admin has access to its location. So correct way to fix this issue is raise 403 Forbidden if any user other than admin tries to deletes the data.