unable to download build artifacts for certain restricted project with build info

[vishal]

unable to download build artifacts for certain restricted project with build info:
https://android-build.linaro.org/builds/~linaro-android-restricted/juice-aosp/
https://android-build.linaro.org/builds/~linaro-android-restricted/juice-linaro/
https://android-build.linaro.org/builds/~linaro-android-restricted/juice-aosp-tiny/

The build artifacts are protected by launchpad group membership which is private:
https://launchpad.net/~linaro-juice

One ends up getting this error:

--------------------------------------------------------------------------------
Forbidden

You do not have the correct group membership to access this file. You
need to be the member of the linaro-juice team in Launchpad. If you
think you should have access, you can try logging in again and check
that one of the required group memberships are selected.

Login again
--------------------------------------------------------------------------------

[Milo Casagrande (milo)]

Talked with IS, looks like it is necessary to tell SSO that the private team is a safe team that can be used to login.
Will file a ticket with the request.

[Milo Casagrande (milo)]

Filed a ticket to IS, it is number 754.

[Milo Casagrande (milo)]

As per the opened ticket, snapshots.l.o (through HTTPS) should now be able to see also the linaro-juice private team.
If I try to access the above links, some of the latest builds now give me "Page not found" on snapshots.l.o, but I can safely access the oldest builds.

[Milo Casagrande (milo)]

With my Launchpad account, for:

https://android-build.linaro.org/builds/~linaro-android-restricted/juice-aosp/

Starting from build 45 and earlier builds, I can access the download pages.

For:

https://android-build.linaro.org/builds/~linaro-android-restricted/juice-linaro/

from build 84 to earlier builds it works.

For https://android-build.linaro.org/builds/~linaro-android-restricted/juice-aosp-tiny/ all should be working.

[vishal (vishalbhoj)]

it appears that older builds are protected by :
OpenID-Launchpad-Teams: linaro-android-restricted

The newer ones which are not accessible are protected by:
OpenID-Launchpad-Teams: linaro-juice

For https://android-build.linaro.org/builds/~linaro-android-restricted/juice-aosp-tiny/ the newer builds after #16 dont seem to be publishing BUILD-INFO.txt on snapshots.linaro.org

[Paul Sokolovsky (pfalcon)]

We investigated the issue to be caused by the fact that https://launchpad.net/~linaro-juice is a private launchpad team. Private teams are not exported for integration outside of Launchpad (in particular, it's not possible to verify if given user is a member of private teams).

So, the solution would be to change team to public. Unfortnately, Launchpad doesn't allow turning private team into public, so consider deleting and recreating, if that's possible, or otherwise create a new group for further usage.

[Paul Sokolovsky (pfalcon)]

(Tested by creating https://launchpad.net/~pfalcon-team , first public, then private, and watching how typical django-openid-auth app behaves - with public, the group name is shown on the openid login form, when turned private, it's not shown).

[Данило Шеган (danilo)]

Ricardo Kirkner <ricardo.kirkner@canonical> has helped set this up for snapshots.linaro.org and android-build.linaro.org. I am also asking for releases.l.o, releases/snapshots.staging.l.o. Vishal has confirmed that logging out and back in helps (people need to ensure that after that, appropriate private teams are passed on as well).

[Paul Sokolovsky (pfalcon)]

Danilo, can you please clarify what exactly was done - was private group membership info exported for 3rd-party app OpenID auth? Was this done as exception fro linaro-juicy, or will work for any (future) private group for auth on the sites you mentioned?