launchpad-dev team mailing list archive

[Jonathan Lange <jml@xxxxxxxxxxxxx>]

On Wed, Dec 2, 2009 at 1:03 PM, Barry Warsaw <barry@xxxxxxxxxxxxx> wrote:
> On Dec 2, 2009, at 6:53 AM, Jonathan Lange wrote:
>
>> 1. Putting owner in the URL and conflating ownership with write
>> permissions leads to broken URLs, which is bad.
>>
>> John gets fed up with having to wait for the Launchpad team to release
>> new versions of launchpadlib etc, so he sets up a daily build at:
>>
>>  https://lp.net/~john-the-coder/ubuntu/python-launchpadlib/+recipe/nightly.
>>
>> That works great for a while, but eventually someone makes a change to
>> launchpadlib that means that the packaging branch in the recipe is no
>> longer appropriate, which means the PPA is out of date.
>>
>> John is no longer interested in this launchpadlib crap. He looks
>> around for someone who wants to maintain it, and finds US government
>> agent Jack Bauer, who is going to fix it NOW. John passes edit
>> permissions (and thus ownership) to Jack, changing the URL to:
>>  https://lp.net/~jack-bauer-24/ubuntu/python-launchpadlib/+recipe/nightly
>>
>> Meanwhile, Kara is really getting into launchpadlib hacking and has
>> come to rely on John's daily build. She notices that John's PPA is out
>> of date, makes a note of the recipe URL so she can fix it later, and
>> then gets on with other things. Then, some time after US special agent
>> Jack Bauer has taken control of the situation, she goes to the URL she
>> wrote down and gets a 404! Noooo.
>
> Isn't that where teams come in?

Well, only if we do something like forbid people to own recipes as individuals.

It's _actually_ where ACLs come in.

>  Would it be totally insane to restrict
> tilde names in the URLs to teams only?  Even when it's super trivial to
> create new teams? <wink>

Not totally insane, but at least 95% insane.

jml