launchpad-dev team mailing list archive

[Curtis Hovey <curtis.hovey@xxxxxxxxxxxxx>]

A Brief Primer on Launchpad Privacy (issue 6)
=============================================

Working with Private Structures or Artefacts in Public Contexts
---------------------------------------------------------------

It is common for users to see their private things in lists, such as a list
of private bug in a list of bugs or a private team in a list of subscribers.
Launchpad SQL queries will restrict the listing to public items and the
few private items the user is subscribed to.

Private items will be displayed differently in listings to indicate that they
are private to the user. This will inform the user about the risk of taking
a screen shot of the page and posting it in a public location. Private
pages will clearly state the page is private to remind the user about the
project or distro he is working in.

If a private item is wrongly included in a listing, or on a page, the
permissions rules on the item will automatically hide the name and
prevent the item from being linked (just as private teams operate
now).  If the listing or page tries to access any other piece of
information about the item, a "403 - Forbidden" error will be
raised.  This display will be considered a bug and Launchpad engineers will fix the page/code
so that it unaccessible private items are filtered from the view,
avoiding the redacted message.


Distribution Source Package Administrators
------------------------------------------

Canonical wants to allow a user or team under an NDA to have access to *all*
private artefacts that are associated with a distribution source package.
This user will administer the DSP on Canonical's behalf. The admin will have
full access to bugs, questions, and source package branches. Making someone
a DSP admin gives the user partial access to the distro, series, and
milestones to see their names. The user has full access to the distribution
and series source package, and the bugs, questions, and branches that are
targeted to it.

            https://launchpad.net/distro1/+source/fnord-package/+bug/61
    https://launchpad.net/distro1/series2/+source/fnord-package
       https://bugs.launchpad.net/distro1/+source/fnord-package/+bug/61
                                  ^      /+source/fnord-package/+question/85
                                  |                ^
                                  |                |
                                  |                Full access
                                  Partial access


-- 
__Curtis C. Hovey_________
http://launchpad.net/

Attachment: signature.asc
Description: This is a digitally signed message part