Source not necessarily available for copies from private archives into a public archive
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Launchpad itself |
New
|
Undecided
|
Unassigned |
Bug Description
We've got some entries in the Ubuntu devel series's NEW queue at the minute. They were copied from a private archive owned by a private team.
I'm in ~ubuntu-archive which has queue admin permissions for the NEW queue. I can't download the sources to review these packages - I get permission denied errors. One way or another I should be able to get at this to be able to review the package.
Arguably copying the package to a public archive is an act of disclosure, so making the sources available to the public - attached directly to the copy in the queue entry - would be one way to solve this.
Or if there is intended to be the queue as a safety net, then maybe the following:
- Fix the safety net to be consistently applied. Make sure that *all* copies to public archives from private ones end up in a queue. If the series is in Active Development (open) then it should still land in UNAPPROVED to prevent accidental disclosure.
- Grant access to the source to queue admins so the upload can be reviewed. Colin says this may be tricky currently for similar reasons to bug #851562.
summary: |
- Source not available for copies from private archives into a public - archive + Source not necessarily available for copies from private archives into a + public archive |