launchpad-dev team mailing list archive

[William Grant <wgrant@xxxxxxxxxx>]

On Tue, 2010-02-09 at 08:26 -0500, Curtis Hovey wrote:
> On Sun, 2010-02-07 at 19:57 -0800, Osprey Erp wrote:
> > Ok, I thought that all accounts also showed up on staging server.  No?
> > To use staging server to test some things do I have to create a
> > separate account on the staging server?
> 
> 
> I see an problem that needs immediate fixing. Staging has not been
> updated in weeks. This means new users cannot use staging for testing,
> which is a contributing factor to why so many users create test projects
> in production. A stale staging db also makes testing hard. I rely on
> staging to investigate registry data integrity issues, such as spam.
> 
> I will to land a fix for this bug this week:
> 
> Bug 321493 [Not possible to register or reset password on staging]
>         https://bugs.edge.launchpad.net/launchpad-foundations/+bug/321493
> 
>         The register and forgot password views will test the template if
>         the environment is staging. The templates will explain that
>         outgoing email is disabled on staging and it will show the link
>         to the LoginToken for the user to complete his action.

That sounds like a perfect recipe for complete information disclosure.