After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 764104 - Info about private bug leaked via describeuser
Info about private bug leaked via describeuser
Status: RESOLVED DUPLICATE of bug 764079
Product: bugzilla.gnome.org
Classification: Infrastructure
Component: Reports
unspecified
Other Linux
: Normal major
: ---
Assigned To: Bugzilla Maintainers
Bugzilla Maintainers
Depends on:
Blocks:
 
 
Reported: 2016-03-23 19:45 UTC by Egmont Koblinger
Modified: 2016-04-30 20:44 UTC
See Also:
GNOME target: ---
GNOME version: ---


Description Egmont Koblinger 2016-03-23 19:45:04 UTC 
_Without_ being logged in, go to

https://bugzilla.gnome.org/show_bug.cgi?id=730817
=> Access denied (as expected)

https://bugzilla.gnome.org/buglist.cgi?quicksearch=product%3A"gnome-terminal"
=> 730817 does _not_ show up (as expected; it shows up if logged in with proper permissions)

https://bugzilla.gnome.org/page.cgi?id=describeuser.html&login=egmont%40gmail.com
=> 730817 (its category and summary) _does_ show up

Expected results:

The describeuser.html page should not disclose the private bug's summary and the patch's description.

(I've originally reported this at https://bugzilla.mozilla.org/show_bug.cgi?id=1259190 but they say describeuser.html is a downstream GNOME page.)
Comment 1 Michael Catanzaro 2016-04-30 20:43:07 UTC 

*** This bug has been marked as a duplicate of bug 764079 ***
Comment 2 Michael Catanzaro 2016-04-30 20:44:36 UTC 
Very strange, it seems I reported this issue only a couple hours before you did!