[Savannah-hackers] Re: serious bug in membership management

[Mathieu Roy]

"Yoshinori K. Okuji" <address@hidden> said:

> Hello,
>
> There should be a serious bug in the membership management in Savannah. 
> To make things specific, I describe what happened in real life.
>
> I'm the official maintainer of GNU GRUB, and it is hosted on 
> savannah.gnu.org. Some days ago, a contributor (Rick van Rein) was 
> misinterpretting a documentation in GNU GRUB, so he requested a 
> subscription to the membership of GNU GRUB via the Savannah interface, 
> just to submit a bug report. This was not a big problem, but he could 
> (actually he did) commit his patch to the CVS himself, and even 
> modified some fields of his own bug report in the bug tracker, which 
> are supposed to be modified only by administrators! Note that I didn't 
> accept his membership, as his request was just a mistake and I didn't 
> want to allow him to modify the CVS repository.
>
> This bug can make all projects quite unsecure, IMHO. I wish this will be 
> fixed as soon as possible.

The bug is confirmed and fixed in the CVS.

Regards,

-- 
Mathieu Roy

  +---------------------------------------------------------------------+
  | General Homepage:           http://yeupou.coleumes.org/             |
  | Computing Homepage:         http://alberich.coleumes.org/           |
  | Not a native english speaker:                                       |
  |     http://stock.coleumes.org/doc.php?i=/misc-files/flawed-english  |
  +---------------------------------------------------------------------+