Launchpad itself

Forbidden following link to configure code hosting

Bug #892025 reported by Gavin Panella
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Launchpad itself
Triaged
High
Unassigned

Bug Description

https://code.launchpad.net/hexr contains a "Configure code hosting" link that results in a forbidden error when I follow it, probably because branches are private and I do not have permission to see them

Related branches

lp://staging/~stevenk/launchpad/no-configure-codehosting-for-you
Curtis Hovey (community): Approve (code)
Diff: 44 lines (+24/-0)
2 files modified
lib/lp/code/browser/branchlisting.py (+3/-0)
lib/lp/code/browser/tests/test_branchlisting.py (+21/-0)
Curtis Hovey (sinzui)
tags: added: 403
Revision history for this message
Launchpad QA Bot (lpqabot) wrote :

Fixed in stable r14521 <http://bazaar.launchpad.net/~launchpad-pqm/launchpad/stable/revision/14521>.

Changed in launchpad:
assignee: nobody → Steve Kowalik (stevenk)
tags: added: qa-needstesting
Changed in launchpad:
status: Triaged → Fix Committed
Revision history for this message
Steve Kowalik (stevenk) wrote :

Marking as qa-ok, but really means 'safe to deploy'. It doesn't work, so the bug should not be closed.

tags: added: qa-ok
removed: qa-needstesting
William Grant (wgrant)
Changed in launchpad:
status: Fix Committed → In Progress
Revision history for this message
Steve Kowalik (stevenk) wrote :

So what is going on here is that we have permission to edit the development focus, but we can't see the current branch set.

Changed in launchpad:
assignee: Steve Kowalik (stevenk) → nobody
status: In Progress → Triaged
Revision history for this message
Curtis Hovey (sinzui) wrote :

The issue is not about development focus. I can visit:
    https://code.launchpad.net/testtools/trunk/+setbranch
and see the page. Visiting
    https://code.launchpad.net/hexr/trunk/+setbranch
Errors because the project is already configured with a branch I do not have permission to access:
    Unauthorized: (<Branch u'~ZZZZ/hexr/YYYY' (XXX)>, 'unique_name', 'launchpad.View')

This is a difficult case to deal with. I do have the right as a moderator (~registry) to set the branch, but I do not have permission to see all the branches, and specifically the branch that is currently set. This is more problematic for myself because I am also a commercial admin -- I cannot help with setting up such as project.

We could decide that anyone with permission to configure code hosting can know about the private branches and specifically know about the current branch.

tags: added: branches privacy projects
removed: qa-ok trivial ui
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.