FS#10527 - Restrict ability to delete packages

Attached to Project: AUR web interface
Opened by Allan McRae (Allan) - Thursday, 29 May 2008, 01:17 GMT
Last edited by Eric Belanger (Snowman) - Friday, 30 May 2008, 06:05 GMT
Task Type Feature Request
Category Backend
Status Closed
Assigned To No-one
Architecture All
Severity Medium
Priority Normal
Reported Version 1.5.1
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 1
Private No

Details

It seems the ability to adopt an orphan then delete it is be exploited by an evil minority. e.g. http://bbs.archlinux.org/viewtopic.php?pid=373831

Can we restrict deletions to devs/TUs?
This task depends upon

Closed by  Eric Belanger (Snowman)
Friday, 30 May 2008, 06:05 GMT
Reason for closing:  Duplicate
Additional comments about closing:  Duplicate of  FS#6564 
Comment by Ronald van Haren (pressh) - Thursday, 29 May 2008, 06:38 GMT
You mean that if a user hits the 'delete' button a mail is send to aur-general (or some other way) to notify TUs so we can approve it?
Comment by Allan McRae (Allan) - Thursday, 29 May 2008, 07:00 GMT
Something like that... I think that just because someone maintains a package they shouldn't be able to delete it. Especially since anybody can adopt an orphan (around 10% of packages in the AUR) and then delete it instantly.
Comment by Ronald van Haren (pressh) - Thursday, 29 May 2008, 07:06 GMT
If it does not increase our workload too much I think it is worth to consider. I mean about how many packages per day/week are we talking about?

ps. maybe post a link to aur-general so all TUs see this?

Loading...