← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1489902] [NEW] Artifacts: public artifact may be modified by any user

 

Public bug reported:

Artifacts should be editable only by their owner and admins. However, is
seems like it is not enforced, and if the user has an access to an
artifact (e.g. if the artifact is public) she may modify it even without
being an admin or artifact's owner.

** Affects: glance
     Importance: Undecided
     Assignee: Alexander Tivelkov (ativelkov)
         Status: New


** Tags: artifacts

** Changed in: glance
     Assignee: (unassigned) => Alexander Tivelkov (ativelkov)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Glance.
https://bugs.launchpad.net/bugs/1489902

Title:
  Artifacts: public artifact may be modified by any user

Status in Glance:
  New

Bug description:
  Artifacts should be editable only by their owner and admins. However,
  is seems like it is not enforced, and if the user has an access to an
  artifact (e.g. if the artifact is public) she may modify it even
  without being an admin or artifact's owner.

To manage notifications about this bug go to:
https://bugs.launchpad.net/glance/+bug/1489902/+subscriptions


Follow ups