← Back to team overview

launchpad-dev team mailing list archive

Packaging permissions redux

 

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

According to Curtis, currently any logged-in user has the ability to
create Packagings, i.e. indicate that a ProductSeries is packaged in a
given SourcePackage.

With the new translation sharing between ProductSeries and
SourcePackages, Packagings will have significant side-effects.  Creating
a Packaging will cause translations to be merged, so that they can be
shared going forward.  Deleting a packaging will cause the translations
to be split.  Merging and splitting can cause information loss, so it is
best to avoid bogus merges.

This suggests that we should restrict the ability to create and destroy
Packagings.  Curtis mentioned that in his experience, Packagings created
by members of Project teams were low-quality, compared with Packagings
created by Packagers.  So perhaps we should restrict Packaging creation
to those with upload rights on the relevant source packages.

Thoughts?

Aaron
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEUEARECAAYFAk11NH0ACgkQ0F+nu1YWqI2YqACYsNp/q79KRYvizp24xKKDy3q3
RACfRchq1aIx2FotuesqJWDaWiOkYNo=
=cnQm
-----END PGP SIGNATURE-----



Follow ups