[Bug 464363] New: sr revoke permission check depends on project write perms
https://bugzilla.novell.com/show_bug.cgi?id=464363 Summary: sr revoke permission check depends on project write perms Product: openSUSE.org Version: unspecified Platform: Other OS/Version: Other Status: NEW Severity: Major Priority: P5 - None Component: BuildService AssignedTo: abauer@novell.com ReportedBy: adrian@novell.com QAContact: adrian@novell.com Found By: --- We had the situation that someone (mmj) create a submission request from a project where he has no write access by accident. He was not able to revoke it himself. How can we avoid this situation ? I see two options: 1) check creator of submission requests to handle revokes 2) do not allow creating submission requests from projects without write permission. But this might become complicate, because permissions might change, even when submission request get not handled. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=464363 User abauer@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=464363#c1 --- Comment #1 from Andreas Bauer <abauer@novell.com> 2009-01-28 08:42:52 MST --- 2) is already in effect. the bug here is that when creating submit requests, package permissions are used for the check, when revoking, project permissions are used. I don't really understand what you mean by things getting complicated. I'd change the permission check when revoking to use the package instead of project. Am I missing something here? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@novell.com