Comment 0 for bug 728059

Revision history for this message
Diogo Matsubara (matsubara) wrote : Manually editing the URL for a private project allows user to access +new-recipe form

Open https://code.launchpad.net/~launchpad-qa/qa-tagger/devel/+new-recipe

You should get a Permission denied error rather than the form to create a new recipe.