launchpad-dev team mailing list archive

[Curtis Hovey <curtis.hovey@xxxxxxxxxxxxx>]

A Brief Primer on Launchpad Privacy (issue 3)
=============================================


Managing Full and Partial Subscriber Lists
..........................................

[Again we are using the word "subscriber" similar to structural
subscription, but this is not about notification]

Full subscription is managed as a direct act where a project owner (for
example) adds a user or team to the project's subscribers. The list of
subscribers will be used to check for full access permission to view
the project and it's artefacts.

Partial subscription is managed indirectly. When a user is subscribed to a
branch (for example), he is added to the partial subscribers list. He may
know the names of the private items to allow him to work with the
private item.

The owner can see the list of who is fully or partially subscribed, and in the
case of teams, see how many members are included. The page will provide
a summary of the number of private items that are known, e.g., milestones
bugs, etc.... The owner can see a summary report of which items the user or
team has a direct subscription to and thus can access. The owner can
see this for all users, full and partial subscriptions.

When a user is unsubscribed from a private item, and he is not
subscribed to any other subordinate private artefacts, he or she is
removed from the partial subscription list. When a user is
unsubscribed from the full subscription list, the owner can review all
items the user is directly subscribed to and then choose to selectively
remove some of those subscriptions,

This is a major point about privacy. The project owner must be able to
manage this without the intervention of Launchpad staff. The owner needs
to know what is being disclosed to whom. The project owner may ask "who
is this person, what does he know about my project"? The owner may want
to know if a user is not seeing information, then grant the user access
to the artefact or whole project. We may consider notification as an
aspect of disclosure--is the user receiving emails about bug changes?


-- 
__Curtis C. Hovey_________
http://launchpad.net/

Attachment: signature.asc
Description: This is a digitally signed message part