Users can create a merge proposal that they cannot delete
Bug #244891 reported by
Aaron Bentley
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| Launchpad itself |
Triaged
|
Low
|
Unassigned | ||
Bug Description
When creating a merge proposal, there doesn't seem to be a check whether the user can view or edit the target branch. Which means they can propose merging into a branch they cannot view. Which means they cannot go to the merge proposal page and delete it.
| Changed in launchpad-bazaar: | |
| importance: | Undecided → Medium |
| status: | New → Triaged |
| tags: | added: code-review |
| Changed in launchpad: | |
| importance: | Medium → Low |
To post a comment you must log in.
