FS#6564 - Regular users should not be able to delete packages.

Attached to Project: AUR web interface
Opened by Eric Belanger (Snowman) - Friday, 09 March 2007, 21:47 GMT
Last edited by Callan Barrett (wizzomafizzo) - Thursday, 05 June 2008, 19:11 GMT
Task Type Bug Report
Category Backend
Status Closed
Assigned To No-one
Architecture All
Severity Medium
Priority Normal
Reported Version 1.2.9
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 4
Private No

Details

I think that regular user should not have the permission to remove their packages from the AUR. There are several reasons for that:
1. A malicious user could adopt the orphaned packages to simply delete them afterward.
2. A user unfamiliar with AUR could delete their packages instead of orphaning them.

If, for some reason (package already in current/extra, etc.), a user want to delete a package, he should contact a TU or post on the ML.
This task depends upon

Closed by  Callan Barrett (wizzomafizzo)
Thursday, 05 June 2008, 19:11 GMT
Reason for closing:  Fixed
Additional comments about closing:  This is applied in testing now
Comment by Andreas Wagner (awagner) - Sunday, 28 October 2007, 09:22 GMT
> If, for some reason (package already in current/extra, etc.), a user want to delete a package, he should contact a TU or post on the ML

But then, how about adding a button which asks for a comment/reason and auto-issues a deletion request to TU-ML. (So regular users trying to be helpful have it as easy as possible, hopefully keeping overall maintenance level high. I, for one, have noticed a -devel package that had its upstream repo changed from svn to git. I built a new -git package, adopted and removed the old -svn one (after asking on the forum). I would have clicked on such a button to have it removed, too, but I don't know if would have fired up my MUA for it...)
Comment by Andreas Wagner (awagner) - Sunday, 28 October 2007, 09:25 GMT
OTOH, I have come across a couple of packages that said in their first comment 'sorry for mistakenly deleting this package, here it is again'.
Maybe the solution to this should be integrated with http://bugs.archlinux.org/task/6515?project=2 (confirmation on deletion)?
Comment by Eric Belanger (Snowman) - Friday, 30 May 2008, 06:06 GMT
There are suggestions about the implementation in  FS#10527 
Comment by Allan McRae (Allan) - Friday, 30 May 2008, 06:15 GMT
Just so it does not get lost, Callen post a patch to implement this on the aur-general list:
http://archlinux.org/pipermail/aur-general/2008-May/007824.html

Loading...