← Back to team overview

launchpad-dev team mailing list archive

Re: Disclosure bugs fixed in the last two weeks.

 

Hi Curtis,

here are my findings for this round of exploratory testing:

https://bugs.launchpad.net/launchpad/+bug/1021129
#1021129 URL auto-linking linkifies data: URLs

• I understand there's a sec vulnerability but from bug's 276726 point
of view, this fix is a regression. Is the plan to not linkify data:
urls anymore?

https://bugs.launchpad.net/launchpad/+bug/839436
#839436 Bug privacy controls get confused after error

• I was unable to reproduce the issue described in the bug report but
I ran into an interesting issue. if the bug has been converted to a
question and you try to change the privacy of it, you get an error
message stating that you don't have permission to do so, even though
I'm a member of the security group.
• Not exactly sure if the problem is related to a question or not, but
it looks like I can't really change information type for bug 2112 on
qastaging or production and on production this bug wasn't turned into
a question.
• After talking to Curtis, I filed
https://bugs.launchpad.net/launchpad/+bug/1029093

https://bugs.launchpad.net/launchpad/+bug/933839
#933839 Share nothing with a user or team
* Test on qastaging.

• I created a new project on qastaging
https://qastaging.launchpad.net/private-branches
  went to the +sharing page and added ~launchpad and shared everything
with the team
  I wanted to remove all the sharing for the team but when I select
Nothing, nothing and nothing the select link is greyed out and if I
click it nothing happens.

https://bugs.launchpad.net/launchpad/+bug/1012448
#1012448 Revoking access to a branch doesn't remove subscriptions

• Created a private branch on qastaging.
  subscribed a test user to the branch
  went to the project's +sharing page and remove that user's access
  the user can't access the branch anymore (LP returns the not allowed
here page). Good.
  the user is still listed as a subscriber in the branch

https://bugs.launchpad.net/launchpad/+bug/1020790
#1020790 Information type widget on +filebug confuses users

• in a project with public bugs by default, if an error occurs filing
a bug (e.g. user forgot to add a description to the bug report), and
the security checkbox is checked, the banner at the top of the page
saying the bug is a security vulnerability disappears

https://bugs.launchpad.net/launchpad/+bug/1024235
#1024235 bug listings are not sortable by information type

• the text inside the information type square looks unaligned. it's
too close to the bottom border, while status and importance looks
centralized

Cheers,

Diogo

On Wed, Jul 18, 2012 at 4:31 PM, Curtis Hovey
<curtis.hovey@xxxxxxxxxxxxx> wrote:
> Hi Diogo.
>
> This is selection of bugs taken from the Recently closed listing on
>     http://people.canonical.com/~curtis/lp-milestone/report.html
> The listing always shows the last two weeks of bugs closed.
>
> https://bugs.launchpad.net/launchpad/+bug/739961
> #739961 person collections in API late evaluate PersonTransferJob
>
> https://bugs.launchpad.net/launchpad/+bug/818456
> #818456 Hidden comments expander fails with out-of-order emails ("-1
> comments hidden")
>
> https://bugs.launchpad.net/launchpad/+bug/867593
> #867593 Displayed number of comments hidden is sometimes +1 to the
> actual value
>
> https://bugs.launchpad.net/launchpad/+bug/1021129
> #1021129 URL auto-linking linkifies data: URLs
>
> https://bugs.launchpad.net/launchpad/+bug/1022896
> #1022896 Some of our team members are reporting that they can not access
> the website (permission denied)
>
> https://bugs.launchpad.net/launchpad/+bug/1023357
> #1023357 "Getting started with code hosting in Launchpad" link has lost
> its text
>
> https://bugs.launchpad.net/launchpad/+bug/1024148
> #1024148 Branch.transitionToInformationType breaks when making a
> subscriberless branch private
>
> https://bugs.launchpad.net/launchpad/+bug/839436
> #839436 Bug privacy controls get confused after error
>
> https://bugs.launchpad.net/launchpad/+bug/933839
> #933839 Share nothing with a user or team
> * Test on qastaging.
>
> https://bugs.launchpad.net/launchpad/+bug/997425
> #997425 Remove access when someone is unsubscribed from a bug or branch
>
> https://bugs.launchpad.net/launchpad/+bug/1008541
> #1008541 Sharing policies unconfigure existing projects
>
> https://bugs.launchpad.net/launchpad/+bug/1012448
> #1012448 Revoking access to a branch doesn't remove subscriptions
> * Test on qastaging.
>
> https://bugs.launchpad.net/launchpad/+bug/1014624
> #1014624 Sharing details page does not show branches
>
> https://bugs.launchpad.net/launchpad/+bug/1017818
> #1017818 subscriber list does not update after changing information type
>
> https://bugs.launchpad.net/launchpad/+bug/1020790
> #1020790 Information type widget on +filebug confuses users
>
> https://bugs.launchpad.net/launchpad/+bug/1024235
> #1024235 bug listings are not sortable by information type
>
> https://bugs.launchpad.net/launchpad/+bug/179820
> #179820 Default "Undecided" importance is below all the others, and
> that's odd
> --
> Curtis Hovey
> http://launchpad.net/~sinzui
>



-- 
Diogo M. Matsubara


Follow ups