launchpad-dev team mailing list archive

[Julian Edwards <julian.edwards@xxxxxxxxxxxxx>]

On Friday 17 September 2010 18:05:26 Curtis Hovey wrote:
> >     * Full disclosure means user can view all aspects of the project.
> > 
> >       * The user can see private branches of code, bug reports, and
> >         personal private package archives (P3A) automatically.
> 
> bac: The private PPA access may be sticky, given their use of tokens
> and custom-generated .htaccess files.  Not that it cannot be done, but
> I'd suspect to see objections from Julian.
> 
> sinzui: Launchpad traversal was invented so solve this very use case.
> Users were given view and we know that is wrong.

Given that we're going to be needing a *much* better privacy story for derived 
distributions, I've got no objections, but as bac says we do need to think 
carefully about how this integrates with private PPA subscriptions.  I don't 
have any thoughts on that at the moment.

I'm really happy that someone is thinking more about privacy though!

J