Differences between revisions 1 and 5 (spanning 4 versions)
Revision 1 as of 2011-08-26 18:05:26
Size: 2950
Editor: ?ArnoToell
Comment:
Revision 5 as of 2012-03-25 22:07:49
Size: 4591
Comment: typo
Deletions are marked like this. Additions are marked like this.
Line 6: Line 6:
== Open tasks ==
Line 19: Line 21:
 :: Bug: https://alioth.debian.org/tracker/index.php?func=detail&aid=313252&group_id=100127&atid=413115|Alioth]]  :: Bug: [[https://alioth.debian.org/tracker/index.php?func=detail&aid=313252&group_id=100127&atid=413115|Alioth]]
Line 29: Line 31:
== Done stuff ==

 Use the GPG class to determine uploader (for FTP uploads at least)::
 :: Owner: daemonkeeper
 :: Bug: None
 :: Status: Done, went live in v2
Line 32: Line 41:
 :: Status: ?  :: Status: Done, went live in v2
Line 34: Line 43:
 
= Bug fixes and improvements =
Line 38: Line 48:
 Use the GPG class to determine uploader (for FTP uploads at least)::
 :: Owner: <you?>
 Verify the ownership of the uploaded GPG key::
 :: Owner: <you ?>
Line 41: Line 51:
 :: Status: Open  :: Status: TODO
 :: Details: We currently don't check if the GPG key actually is owned by the user. We should make sure that a uid on the key matches the email address of the account, and do some challenge/response to assert ownership of the private key.
 :: Where to look: `debexpo/controllers/my.py`
Line 43: Line 55:
  = Bug fixes and improvements =
 Verify the strength of the GPG keys::
 :: Owner: <you ?>
 :: Bug: None
 :: Status: TODO
 :: Details: We should check if the keys uploaded to mentors.debian.net are strong enough for inclusion in the debian keyring, and warn the user if it is not.
 :: Where to look: `debexpo/controllers/my.py`

 Use GPG to verify the uploader of the package::
 :: Owner: <you ?>
 :: Bug: None
 :: Status: TODO
 :: Details: mentors.debian.net associates the uploaded files to an account on the website by using the Changed-By field. We should use the GPG uid instead.
 :: Where to look: `bin/debexpo_importer.py`

 Make users accept the DMUP before allowing uploads::
 :: Owner: <you ?>
 :: Bug: None
 :: Status: TODO
 :: Details: mentors.debian.net aims at becoming an official Debian service, hosted on Debian hardware. For this to happen, we need among other things that users accept the Debian Machine Usage Policy before allowing them to upload packages.
 :: Where to look: `debexpo/model/users.py` (database), `debexpo/controllers/my.py` (user interface), `bin/debexpo_importer.py` (pre-import check)
Line 52: Line 83:

 Adding comments leads to an "Internal Server Error"::
 :: Assigned to: Asheesh
 :: Bug: [[https://alioth.debian.org/tracker/index.php?func=detail&aid=313301&group_id=100127&atid=413115|Alioth]]
 :: Status: ?
Line 62: Line 88:
    Remove packages from Expo which have been uploaded to Unstable::
 :: Assigned to: daemonkeeper
 :: Bug: none
 :: Status: Work in progress
Line 73: Line 94:
== Open tasks == == Done ==
Line 76: Line 97:
  :: Assigned to: <you ?>   :: Assigned to: olasd
Line 78: Line 99:
  :: Status: Done, went live in v2
  
 Remove packages from Expo which have been uploaded to Unstable::
 :: Assigned to: daemonkeeper
 :: Bug: none
 :: Status: Done, went live in v2

 Adding comments leads to an "Internal Server Error"::
 :: Assigned to: olasd
 :: Bug: [[https://alioth.debian.org/tracker/index.php?func=detail&aid=313301&group_id=100127&atid=413115|Alioth]]
 :: Status: Done, went live in v2.2

This page is for coordinating and discussing development efforts, currently going on on Expo. While you can add your own ideas here, please note this page is not a wish list.

Please use this page to let other people know, what existing ideas are, and who intends to implement them. If you are looking for work, have a look to our bug list and drop a note if you are working on something - or add yourself here below.

Shiny new features

Open tasks

Implement the Sponsor Metrics

Owner: <you?>

Bug: None

More: DebianMentorsNet#Metrics

Status: Open
Integrate with Debian Teams

Owner: <you?>

Bug: Alioth

Status: Open
Social website idea: add review marking and user ranking to expo and/or ACK

Owner: <you?>

Bug: Alioth

Status: Open (see RFS comments below)

Tasks being assigned to someone

Import RFS mailing list comments to Expo
Owner: daemonkeeper
Bug: None
Status: Some efforts have been made

Done stuff

Use the GPG class to determine uploader (for FTP uploads at least)
Owner: daemonkeeper
Bug: None
Status: Done, went live in v2
Refactor the plugin infrastructure to increase readability and normalization of outputs
Owner: olasd
Bug: None
Status: Done, went live in v2

Bug fixes and improvements

Open tasks

Verify the ownership of the uploaded GPG key

Owner: <you ?>

Bug: None
Status: TODO
Details: We currently don't check if the GPG key actually is owned by the user. We should make sure that a uid on the key matches the email address of the account, and do some challenge/response to assert ownership of the private key.

Where to look: debexpo/controllers/my.py

Verify the strength of the GPG keys

Owner: <you ?>

Bug: None
Status: TODO
Details: We should check if the keys uploaded to mentors.debian.net are strong enough for inclusion in the debian keyring, and warn the user if it is not.

Where to look: debexpo/controllers/my.py

Use GPG to verify the uploader of the package

Owner: <you ?>

Bug: None
Status: TODO
Details: mentors.debian.net associates the uploaded files to an account on the website by using the Changed-By field. We should use the GPG uid instead.

Where to look: bin/debexpo_importer.py

Make users accept the DMUP before allowing uploads

Owner: <you ?>

Bug: None
Status: TODO
Details: mentors.debian.net aims at becoming an official Debian service, hosted on Debian hardware. For this to happen, we need among other things that users accept the Debian Machine Usage Policy before allowing them to upload packages.

Where to look: debexpo/model/users.py (database), debexpo/controllers/my.py (user interface), bin/debexpo_importer.py (pre-import check)

Tasks being assigned to someone

Lost password feature does not work for accounts not activated yet
Assigned to: Asheesh

Bug: Alioth

Status: ?
Add proper archive meta data for repositories (e.g. Sources.gz files)
Assigned to: Asheesh
Bug: none
Status: ?
Reject certain packages which don't meet the bare essential minimal criterias
Assigned to: daemonkeeper
Bug: none
Status: Staging

Done

Rework the viewer class to come over HTML display issues
Assigned to: olasd

Bug: 1, 2, 3

Status: Done, went live in v2
Remove packages from Expo which have been uploaded to Unstable
Assigned to: daemonkeeper
Bug: none
Status: Done, went live in v2
Adding comments leads to an "Internal Server Error"
Assigned to: olasd

Bug: Alioth

Status: Done, went live in v2.2