Export irc_nicknames with "anonymous" requests

Bug #488394 reported by Terence Simpson
12
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Launchpad itself
Fix Released
Low
William Grant

Bug Description

It would be useful for us to be able to get the IRC nicks of a user over the API for non-authenticated requests, using the https://launchpad.net/api/beta/ URL

Anyone can view the IRC nicks on a users page, without being logged into launchpad, but currently requesting a list of IRC nicks for a user with the API returns no entries in the json for "anonymous" requests, eg:
https://launchpad.net/api/beta/~tsimpson/irc_nicknames
{"total_size": 4, "start": 0, "resource_type_link": "https://launchpad.net/api/beta/#irc_id-page-resource", "entries": []}

I can see that I have 4 entries, but none are returned, using https://api.launchpad.net/beta/ (or sending my "lp" cookie in the GET request), return the entries as expected. But a seeing as the information is available to non-logged in users via the web interface, it should also be available to non-logged in users via the API.

Related branches

Revision history for this message
Leonard Richardson (leonardr) wrote :

It sounds like this field is protected by a permission that anonymous users don't have, but the website gets an un-security-proxied version of the object so it can display the information without a permission check. If anonymous users really should be able to see this information, it should be unprotected.

Curtis Hovey (sinzui)
affects: launchpad-foundations → launchpad-registry
Changed in launchpad-registry:
importance: Undecided → Low
status: New → Triaged
Revision history for this message
Jussi Schultink (jussi01) wrote :

This field is available to non logged in users via the web interface so following that logic it makes sense it would be available to anonymous api users.

Revision history for this message
William Grant (wgrant) wrote :

The problem here is just the usual collection issue when launchpad.View is not defined. Somebody should add a security adapter deriving from AnonymousAuthorization for IWikiName and IIrcID.

William Grant (wgrant)
Changed in launchpad-registry:
status: Triaged → In Progress
assignee: nobody → William Grant (wgrant)
Curtis Hovey (sinzui)
Changed in launchpad-registry:
milestone: none → 10.03
Revision history for this message
Ursula Junque (ursinha) wrote : Bug fixed by a commit
Changed in launchpad-registry:
status: In Progress → Fix Committed
tags: added: qa-needstesting
Curtis Hovey (sinzui)
tags: added: qa-ok
removed: qa-needstesting
Revision history for this message
Curtis Hovey (sinzui) wrote : Bug 488394 Fix released

Fixed released in launchpad-project 10.03.

Changed in launchpad-registry:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.