ubuntu-appstore-developers team mailing list archive

[Martin Albisetti <martin.albisetti@xxxxxxxxxxxxx>]

Hi all,

Following the UDS discussion[1] about click packages as part of the
touch image, I'd like to flesh out how I understand the server should
work.
The core idea here is that tying a namespace to a user alone is not a
good fit for a collaborative, team-based software development process.

The proposed solution would that someone would still own a namespace,
but would be able to give access to teams to be able to update the
app.

An example of this would be, for any app that is shipped in the
default image that Ubuntu isn't the upstream, we'll want core devs to
be able to push updates to it (especially security updates).

So my proposal is this: from the app page, you will be able to add
multiple teams to it, and anyone who is on one of those teams will be
able to upload new versions of the app (but not necessarily to a lot
more).
They would not own the namespace, they would just be able to upload.

I'm not sure if this interferes with package signing in any way, as
it's the server that verifies the signature.


Does this make sense?



[1] http://summit.ubuntu.com/uds-1308/meeting/21931/community-1308-policy-of-default-click-packages/

-- 
Martin