The distribution +edit page is only accessible by LP admins

Bug #232454 reported by Julian Edwards
22
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Launchpad itself
Fix Released
High
Guilherme Salgado

Bug Description

e.g. https://edge.launchpad.net/baltix/+edit

This page should be accessible and editable by the owner of the distribution, however due to the presence of the checkboxes at the bottom of that page which require an LP admin, the page becomes unavailable to the distro owner.

Steps to reproduce:
1. Logged in as Foo Bar, open http://launchpad.dev/ubuntu
2. Set the registrant to no-priv
3. Open http://launchpad.dev/ubuntu/+edit
4. Check the "This project uses blueprints" checkbox
5. Click Change
6. Not allowed here error

The checkbox should not be available if you are not allowed to change it.

description: updated
Changed in soyuz:
status: New → Confirmed
Revision history for this message
Julian Edwards (julian-edwards) wrote :

Matsubara, This isn't quite the same scenario as reported but it's related to the same problem.

The way I reproduced it is to:
1. Log in as an admin
2. Set the registrant to any non-admin
3. Go to http://launchpad.dev/ubuntu/+edit and make sure "uses blueprints" is checked.
4. Log in as the non-admin user from step 2.
5. Go to http://launchpad.dev/ubuntu/+edit
 -> You'll be redirected to the login page.

Hence the original description of total inaccessibility is correct, rather than just not being able to edit :-)

description: updated
Revision history for this message
Christian Reis (kiko) wrote :

I had a user confirm this today with the nUbuntu distribution -- they were unable to +edit it.

Changed in soyuz:
assignee: nobody → michael.nelson
importance: Undecided → Medium
milestone: none → 2.2.1
status: Confirmed → Triaged
Revision history for this message
Christian Reis (kiko) wrote :

Is this actually Soyuz or more Registry?

Changed in soyuz:
assignee: michael.nelson → nobody
importance: Medium → High
milestone: 2.2.1 → none
Revision history for this message
Celso Providelo (cprov) wrote :

It would nice if the Registry team can work in this area, applying the same standards they already use for projects/products/people.

By "this area" I mean, Distribution/DistroSeries general forms (+add, +edit and +admin).

Revision history for this message
Julian Edwards (julian-edwards) wrote :

One team one dream I say.

Revision history for this message
Curtis Hovey (sinzui) wrote :

Why is this High now? Not that I think it is sane to deny owner/maintainer the power to fulfil their responsibility. This can be scheduled for fixing if the issue is indeed high now.

Revision history for this message
Curtis Hovey (sinzui) wrote :

There are some bugs that may relate to the discrepancy between role and permission: bug 159116, bug 107775. They may be closable by addressing the core issue.

Curtis Hovey (sinzui)
Changed in launchpad-registry:
assignee: nobody → salgado
Curtis Hovey (sinzui)
Changed in launchpad-registry:
milestone: none → 2.2.1
Revision history for this message
Guilherme Salgado (salgado) wrote :

This bug's description says that the checkboxes should not be present when the user doesn't have permission to change them, which is the case of the distro's owner.

However, if we want consistency with projects, then we need to make it possible for the distro owners to change the things represented by the checkboxes.

We'll have to re-evaluate whether or not bug 273652 is a dupe of this one after we decide how we're going to fix this bug.

Revision history for this message
Curtis Hovey (sinzui) wrote :

Making projects and distribution consistent is the right thing to do. I believe that would invalid some bugs, and implicitly fix others

Revision history for this message
Guilherme Salgado (salgado) wrote :

mainline r7520

Changed in launchpad-registry:
status: Triaged → Fix Committed
Changed in launchpad-registry:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.