Source not necessarily available for copies from private archives into a public archive

[Iain Lane]

We've got some entries in the Ubuntu devel series's NEW queue at the minute. They were copied from a private archive owned by a private team.

I'm in ~ubuntu-archive which has queue admin permissions for the NEW queue. I can't download the sources to review these packages - I get permission denied errors. One way or another I should be able to get at this to be able to review the package.

Arguably copying the package to a public archive is an act of disclosure, so making the sources available to the public - attached directly to the copy in the queue entry - would be one way to solve this.

Or if there is intended to be the queue as a safety net, then maybe the following:

  - Fix the safety net to be consistently applied. Make sure that *all* copies to public archives from private ones end up in a queue. If the series is in Active Development (open) then it should still land in UNAPPROVED to prevent accidental disclosure.
  - Grant access to the source to queue admins so the upload can be reviewed. Colin says this may be tricky currently for similar reasons to bug #851562.