Bug 924200 - [xmlrpc_FlagType]Can create flagtype with invalid name via RPC
Summary: [xmlrpc_FlagType]Can create flagtype with invalid name via RPC
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Bugzilla
Classification: Community
Component: WebService
Version: 4.4
Hardware: Unspecified
OS: Unspecified
high
urgent
Target Milestone: ---
Assignee: Simon Green
QA Contact: tools-bugs
URL:
Whiteboard:
Depends On:
Blocks: 822007
TreeView+ depends on / blocked
 
Reported: 2013-03-21 11:01 UTC by Xin Zhang
Modified: 2014-10-12 22:50 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2013-04-16 06:01:53 UTC
Embargoed:


Attachments (Terms of Use)

Comment 1 Simon Green 2013-03-21 11:08:49 UTC
(In reply to comment #0)
> Steps to Reproduce:
> 1.Login with user who is in "editusers" group.
> 2.Passing an existing name and proper description to this call.
>   
> Expected results:
> Cann't create successfully.

It is perfectly legal to create two different flag types with the same name.

Comment 2 Roman Joost 2013-03-25 03:48:22 UTC
Hi Xin,

would it be possible to add the calls to this report to reproduce this easier? Either as a comment or preferable as an attachment.

Thanks a lot!

Comment 3 Xin Zhang 2013-03-25 06:07:46 UTC
(In reply to comment #2)
> Hi Xin,
> 
> would it be possible to add the calls to this report to reproduce this
> easier? Either as a comment or preferable as an attachment.
> 
> Thanks a lot!

Sure,for example,

>>> xmlrpc.FlagType.create({'name':[123456],'description':'for a test'})
    Return:{'id': 534}

    In actually,array is invalid name,the name should be a string.So it should return related error info.

Thank you.

Comment 4 Simon Green 2013-04-16 06:01:53 UTC
Like the other RPC issue reported, this is not something that I think we need to fix, especially since only people with the proper privilege can use this RPC call.


Note You need to log in before you can comment on or make changes to this bug.