Export irc_nicknames with "anonymous" requests
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Launchpad itself |
Fix Released
|
Low
|
William Grant |
Bug Description
It would be useful for us to be able to get the IRC nicks of a user over the API for non-authenticated requests, using the https:/
Anyone can view the IRC nicks on a users page, without being logged into launchpad, but currently requesting a list of IRC nicks for a user with the API returns no entries in the json for "anonymous" requests, eg:
https:/
{"total_size": 4, "start": 0, "resource_
I can see that I have 4 entries, but none are returned, using https:/
Related branches
- Guilherme Salgado (community): Approve (code)
-
Diff: 54 lines (+20/-0)2 files modifiedlib/canonical/launchpad/security.py (+10/-0)
lib/lp/registry/stories/webservice/xx-person.txt (+10/-0)
affects: | launchpad-foundations → launchpad-registry |
Changed in launchpad-registry: | |
importance: | Undecided → Low |
status: | New → Triaged |
Changed in launchpad-registry: | |
status: | Triaged → In Progress |
assignee: | nobody → William Grant (wgrant) |
Changed in launchpad-registry: | |
milestone: | none → 10.03 |
tags: |
added: qa-ok removed: qa-needstesting |
It sounds like this field is protected by a permission that anonymous users don't have, but the website gets an un-security-proxied version of the object so it can display the information without a permission check. If anonymous users really should be able to see this information, it should be unprotected.