launchpad-dev team mailing list archive

[Curtis Hovey <curtis.hovey@xxxxxxxxxxxxx>]

On 07/30/2012 02:26 PM, Aaron Bentley wrote:
> On 12-07-30 10:01 AM, Matthew Revell wrote:
>> https://dev.launchpad.net/LEP/PrivateProjects
> 
>> An untrusted user cannot guess the name of a private project based 
>> on the error message given when trying to register a new project
>> with the same name.
> 
> How do we accomplish this?

This is the existing nameblacklist which implemented this for private
teams in 2010. [1]

It already states that the name is not available. We can assign admins
(teams) to name patterns that permit those teams to create projects and
teams of that blacklisted name. This is how we manage our names now, you
can see our teams next to our name patterns.

https://launchpad.net/+nameblacklist


[1] in 2010, we wanted all private names to be prefixed with 'private-'
to make it very certain they cannot be guessed. Users rejected this
requirement.

-- 
Curtis Hovey
http://launchpad.net/~sinzui

Attachment: signature.asc
Description: OpenPGP digital signature