Commercial admins have far too much power over PPAs.

[Julian Edwards]

Commercial admins can see ALL private PPAs, their +packages pages and their +admin pages. This goes way beyond what a commercial admin should be doing and exposes secret data beyond its intended audience.

We need a new PPA admin role that can see everything, the commercial admin should be restricted to the +admin page.

[Robert Collins (lifeless)]

Can we just restrict commercial admin? duck can see everything already..

[Julian Edwards (julian-edwards)]

I would like to see a PPA admin role because it *vastly* helps whoever's doing support, in the same way that we have registry admins.

[Jonathan Lange (jml)]

Perhaps bug 1012135 is a small step toward addressing this.

[Jonathan Lange (jml)]

The branch linked to bug 1012135 does not address the problem in this bug, that 'commercial admin' intrinsically has too much power over PPAs. However, it might allow some present members of ~commercial_admin to be removed from that team and granted commercial subscriptions instead, which would reduce the severity of this bug.

[Julian Edwards (julian-edwards)]

Indeed - we can probably re-evaluate the PES permissions. Thanks!