the page for a public branch stacked on a private one should shout at you

Bug #568128 reported by Michael Hudson-Doyle
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Launchpad itself
Fix Released
High
Ian Booth

Bug Description

It's very unlikely that you actually want to have a public branch stacked on a private one -- because people who cannot see the stacked-on branch cannot see the stacked branch -- so the branch page should show a warning about this.

Related branches

Tim Penhey (thumper)
Changed in launchpad-code:
status: New → Triaged
importance: Undecided → Medium
tags: added: privacy
Curtis Hovey (sinzui)
tags: added: disclosure
Changed in launchpad:
importance: Medium → High
Curtis Hovey (sinzui)
tags: added: ui
Revision history for this message
Curtis Hovey (sinzui) wrote :

Since branch access is transitive, it is impossible to have a public branch on a private one. I expect the page to show the privacy ribbon to convey the situation.

We may want to redesign how lp treats this scenario in the data.

I do not think the lower branch should be set as private when pushed because the lower branch could become private after the higher is created. Changing the lower branch to public should not make the high branch public since it might contain private information.

I think the visibility rule (which is actually in play) is correct. The rules to check for visibility are wrong. IPrivacy(stacked_branch) is not checking if the lower branch is private. It wrongly says the branch is public, so the privacy ribbon is missing. The visibility portlet does not check properly either. The portlet should say that the branch is private because the lower branch is private.

Ian Booth (wallyworld)
Changed in launchpad:
status: Triaged → In Progress
assignee: nobody → Ian Booth (wallyworld)
Revision history for this message
Launchpad QA Bot (lpqabot) wrote :
tags: added: qa-needstesting
Changed in launchpad:
status: In Progress → Fix Committed
Ian Booth (wallyworld)
tags: added: qa-ok
removed: qa-needstesting
William Grant (wgrant)
Changed in launchpad:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.