views/bundle/public: Lookup on user

Currently, the public bundle view is only looking up bundles by their
name. This may return multiple bundles if two users have bundles with
the same name.

This change adds the user to the bundle lookup.

Reported-by: Ralf Baechle <ralf@linux-mips.org>
Signed-off-by: Jeremy Kerr <jk@ozlabs.org>

diff --git a/apps/patchwork/views/bundle.py b/apps/patchwork/views/bundle.py
index 9995fc6c4b3a76c1ac6ae0d14cf3f9c3a8fa464f..18beb08fa00f19f3bcdef4536af1fdc24377659b 100644 (file)
--- a/apps/patchwork/views/bundle.py
+++ b/apps/patchwork/views/bundle.py
@@ -180,7 +180,8 @@ def mbox(request, bundle_id):
 
 def public(request, username, bundlename):
     user = get_object_or_404(User, username = username)
-    bundle = get_object_or_404(Bundle, name = bundlename, public = True)
+    bundle = get_object_or_404(Bundle, name = bundlename, owner = user,
+                                public = True)
     filter_settings = [(DelegateFilter, DelegateFilter.AnyDelegate)]
     context = generic_list(request, bundle.project,
             'patchwork.views.bundle.public',