Comment 3 for bug 159304

Hi Celso,

Am Montag, 12. November 2007 15:26 schrieb Celso Providelo:
> Hi Stefan,
>
> We could continue to present the changesfile link only for users with
> edit permissions in the PPA in question, this way correct "replays"
> could continue to be performed collaboratively inside team PPAs.

I guess that might lead to problems as well: If a team member can upload to
given PPA but not to universe for example, while another team member can,
this could still get abused (e.g. having a PPA set up where both MOTUs and
contributors can upload).

After a short discussion on #lp at Saturday evening, it looks like the real
solution would be to have soyuz not accept two identical changes files in a
row. That way the ticket functionality of changes files would be restored.
Since there is a date stamp in a signature, two identical uploads were still
ok (because the signature would then differ). Of course once a PPAs allow the
same distribution names as Debian (or a derivate) there could still arise
problems, but I guess that shouldn't happen in the first place anyways.

Thanks,
    Stefan.