https://bugzilla.novell.com/show_bug.cgi?id=659401 https://bugzilla.novell.com/show_bug.cgi?id=659401#c0 Summary: LDAP users given user,reviewer and bugowner roles are permitted to download the source Classification: Internal Novell Products Product: openSUSE Build Service Version: master Platform: 64bit OS/Version: openSUSE 11.3 Status: NEW Severity: Normal Priority: P5 - None Component: General AssignedTo: adrian@novell.com ReportedBy: ext-senthil.muthukalai@nokia.com QAContact: adrian@novell.com Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.3) Gecko/20100423 Ubuntu/10.04 (lucid) Firefox/3.6.3 LDAP users given user,reviewer and bugowner roles are permitted to download the source through OSC and WEBUI gives error. Reproducible: Always Steps to Reproduce: 1. Create LDAP users ldapu1, ldapu2 and ldapu3 where ldapu3 is under the group ldapg1. 2. With ldapu1 as obs user, create a project prj1 with package pkg1 and upload some source files. 3. Edit the 'raw config' of prj1 to give reviewer role for ldapg1 and ldapu2. 4. Log in to obs webui as ldapu2 and view the sources of pkg1. Click on the 'download' action and observe the response. 5. Log in to obs through osc as ldapu2 and check out project prj1. 6. Repeat steps 4 and 5 as user ldapu3. 7. Repeat steps 3, 4, 5, and 6 with bugowner and user role for ldapu2 and ldapgp1. Actual Results: When the download action is clicked on the source file, the following error is got. <status code="unknown"> − <summary> uncaught exception: undefined method `login' for nil:NilClass </summary> <details/> </status> Through OSC the source gets downloaded with checkout operation. The same is observed for the 'user' and 'bugowner' roles too. Expected Results: 'user', 'bugowner' and 'reviewer' roles may not be given permission to download the sources. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.