package set based archive permission checks do not check package affiliation and distro series

[Muharem Hrnjadovic]

lp.archiveuploader.permission.verify_upload fails to check

  1 - whether the package sets found for the uploader are in the correct distro series
  2 - whether the source package to be uploaded is affiliated with any of the package sets found

[Muharem Hrnjadovic (al-maisan)]

The attached branch passed all tests in ec2

[Muharem Hrnjadovic (al-maisan)]

After a more detailed analysis it became apparent that the code in question only suffers from the following problem:

lp.archiveuploader.permission.verify_upload fails to check whether the package sets found for the uploader and source package are in the correct distro series