NascentUpload doesn't look in the NEW queue

[Daniel Silverstone]

When looking for a source package we currently don't check the NEW queue. This means that may reject a binary build when we could in theory accept it and attach it to the upload in the queue.

[Daniel Silverstone (dsilvers)]

In principle this is also needed for checking against queue/accepted.

Also we need to consider making queue entries depend on others because otherwise we combine the queue entries and end up with a bizarre accept message. especially coming out of NEW

[Celso Providelo (cprov)]

Currently we check correspondent PUBLISHED | PENDING publishing records and additionaly check the ACCEPTED queue. Is it really necessary to check NEW ?

Because we may validade some upload counting on a possible acceptation of the NEW source, which is kind of wasting time, since it's never going to happen in normal workflow, only in external binary upload.

[Celso Providelo (cprov)]

So, as personally discussed, check in NEW isn't required right now. All the code we need is in Soyuz Mainline (r 3283)

[Celso Providelo (cprov)]

Build from NEW was postponed, since it cn be considered obsolete if we reduce the turnaround time in Soyuz from less the 1/2 hour (currently 1 hour)

[Malcolm Cleaton (malcolmcleaton)]

The code XXX in nascentupload is still there for this.

Although there's no need with current policy to check against sources in the NEW queue when looking for the source package matching an uploaded binary, we should do this anyway - nascentupload should work for anything which makes sense, not just the subset our policy currently allows.

[Celso Providelo (cprov)]

In fact, bug #31038 fix introduces a new approach:

uploads present in NEW are considered untrusted, they can be duplicated (same name/version) and the uniqueness will be only enforced in the transition to ACCEPTED.

Since *known* uploads are promoted to ACCEPTED automatically in the upload time (auto-approve), they will be rejected if the uniqueness is not respected.

So, we definately don't want to check version consistency against NEW.

Maybe storing possibly duplicated NEW uploads will let us in a risk condition, by wasting storage space and other resources, but I don't think this is the case right now.