Roundup Tracker - Issues

Issue 2550536

classification
Title: Audit file/message linking/unlinking
Type: security Severity: major
Components: Web interface Versions: 1.4
process
Status: new Resolution:
Dependencies: Superseder:
Assigned To: Nosy List: ajaksu2, ezio.melotti
Priority: Keywords: patch

Created on 2009-04-12 23:50 by ajaksu2, last changed 2012-10-10 15:46 by admin.

Files
File name Uploaded Description Edit Remove
file_msg_unlink.diff ajaksu2, 2009-04-12 23:53 New auditor, schema and template changes
file_msg_unlink2.diff ajaksu2, 2009-04-13 17:35 Adds the 'linked' check
issue267-2.diff ezio.melotti, 2011-07-25 05:04 Fix applied to the Python bug tracker
Messages
msg3687 Author: [hidden] (ajaksu2) Date: 2009-04-12 23:50
Any user can unlink/link any files or messages from/to any issue.
Attached patch solves spurious unlinking and makes it possible to
restore unlinked files/msgs via the web UI.

However, linking a file or message to many issues is still possible. A
'linked' Boolean attribute could be used to block linking any
already-linked msg/file to another issue, while still allowing e.g. to
move a file from one issue to another.

Any feedback on the current patch or about how to fix the multiple
issues per file/msg problem is most welcome :)
msg3690 Author: [hidden] (ajaksu2) Date: 2009-04-13 17:35
This new version forbids re-linking an already linked file or message to
another issues.
msg4353 Author: [hidden] (ezio.melotti) Date: 2011-07-25 05:04
FWIW the attached patch is the solution currently applied on the
bugs.python.org instance.

See also http://psf.upfronthosting.co.za/roundup/meta/issue267
History
Date User Action Args
2012-10-10 15:46:07adminsetfiles: file_msg_unlink.diff, file_msg_unlink2.diff, issue267-2.diff
2011-07-25 05:04:14ezio.melottisetfiles: + issue267-2.diff
nosy: + ezio.melotti
messages: + msg4353
2009-04-13 17:35:26ajaksu2setfiles: + file_msg_unlink2.diff
messages: + msg3690
2009-04-12 23:53:24ajaksu2setfiles: + file_msg_unlink.diff
keywords: + patch
2009-04-12 23:52:05ajaksu2setfiles: - unlinkauditor.py
2009-04-12 23:50:56ajaksu2create