ubuntu-appstore-developers team mailing list archive

[James Westby <james.westby@xxxxxxxxxxxxx>]

Hi,

We've just deployed a change to staging that alters the way that access
control for downloads is done. Previously the request was just checked
for valid credentials, but now SCA is also consulted to ensure that the
user is able to download the file. This is to keep unpublished files
secret, so that developers can launch when they are ready, and also one
of the pre-requisites to being able to sell click packages.

This shouldn't have much impact, but if you were testing with a file
that has had its entry in the SCA db deleted, you will no longer be able
to download it. Also, if the package isn't published, only the owner and
the reviewers will be able to download it.

It is still possible to oauth sign the request using either headers or a
query string.

Let me know if you have an problems that you think may be connected to
this change.

Thanks,

James