Launchpad itself

Launchpad administrators have implicit bug nomination rights

Bug #253597 reported by Björn Tillenius
28
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Launchpad itself
Triaged
Low
Unassigned

Bug Description

Only bug nomination approvers are meant to be able to do bug nominations, but the security check for nomination approval includes Launchpad administrators. Bug nomination isn't an operational issue and so Launchpad admin rights should not imply bug nomination approval rights.

See original description
Tags: lp-bugs
Revision history for this message
Stuart Bishop (stub) wrote :

This particularly affects Launchpad administrators, who have permission everywhere but shouldn't use that permission.

Revision history for this message
Stuart Bishop (stub) wrote :

A quick fix for Launchpad Admins would solve this for me.

Changed in malone:
status: New → Triaged
Revision history for this message
Robert Collins (lifeless) wrote :

So Nominations are now only doable by those able to approve. I'm going to recast this bug as 'Launchpad Administrators should not be granted implicit nomination rights' - thats the remaining angle that needs closing off.

summary: - Not possible to nominate a bug if you have permission to approve it
+ Launchpad administrators have implicit bug nomination rights
description: updated
Changed in launchpad:
importance: Undecided → Low
Revision history for this message
Robert Collins (lifeless) wrote :

Marking low - we have a small team of administrators which we trust and generally know better - @losas, if you would like this to be high, please say so - I have no idea whether this plagues you regularly or not.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.