NuGet/NuGetGallery — Issue #329: Provide better error message when accepting ownership but access denied
Author: Haacked
Created: 2011-12-06 18:17:12+00:00
State: open

When another user attempts to add you as a package owner, you receive an email with a confirmation URL. But suppose you login with the wrong account (maybe you have more than one), the site returns a 403 error. This is the correct HTTP response, but the error message is unhelpful.

We should detect this specific condition and provide a more helpful page. I was thinking something like:

_You are attempting to claim ownership of package as user 'NotOwner', but the package ownership request was sent to user 'Username'._

It might seem odd to disclose the username, but consider that the only person who legitimately could have clicked on the link in the first place is both users. Make sense?