patch applied (hackage-server): "Restrict uploads to members of the package maintainer group" and 4 others
devnull at community.haskell.org
devnull at community.haskell.org
Fri Jan 25 19:11:53 CET 2013
Fri Jan 25 17:31:02 GMT 2013 Duncan Coutts <duncan at well-typed.com>
* Restrict uploads to members of the package maintainer group
Ignore-this: c7e40d08b81e18d3d52e6c39c0426a0
We can do this now that we can pre-populate the groups when we import
from the old hackage server.
M ./Distribution/Server/Features/PackageCandidates.hs -1 +1
M ./Distribution/Server/Features/Upload.hs -6 +1
Fri Jan 25 17:35:10 GMT 2013 Duncan Coutts <duncan at well-typed.com>
* Only add the uploader to the maintainer group on normal uploads
Ignore-this: f1f062df0d09dc997b3580054c134e25
Previously the mirroring client would also get added to the maintainer group.
M ./Distribution/Server/Features/PackageCandidates.hs +2
M ./Distribution/Server/Features/Upload.hs -9 +2
Fri Jan 25 17:47:11 GMT 2013 Duncan Coutts <duncan at well-typed.com>
* Improve a couple package upload error messages
Ignore-this: 35528e111a04c660be22bc36bb264f84
M ./Distribution/Server/Features/Upload.hs -7 +18
Fri Jan 25 17:48:16 GMT 2013 Duncan Coutts <duncan at well-typed.com>
* Return ETags when serving tarballs
Ignore-this: eaca4f4574be1f47c7a57f775052e0c5
Note that nowhere yet do we actually do the if-not-match check.
M ./Distribution/Server/Features/Documentation.hs -1 +3
M ./Distribution/Server/Features/PackageCandidates.hs -11 +13
M ./Distribution/Server/Features/PackageContents.hs -14 +16
M ./Distribution/Server/Framework/ResponseContentTypes.hs -4 +15
M ./Distribution/Server/Util/ServeTarball.hs -10 +11
Fri Jan 25 17:49:50 GMT 2013 Duncan Coutts <duncan at well-typed.com>
* Add a note about a wrong error response in some circumstances
Ignore-this: dd01ed0d65d9b0817a3317660a3aa6e3
M ./Distribution/Server/Features/Users.hs +3
More information about the cabal-devel
mailing list