2950
Comment:
|
4591
typo
|
Deletions are marked like this. | Additions are marked like this. |
Line 6: | Line 6: |
== Open tasks == |
|
Line 19: | Line 21: |
:: Bug: https://alioth.debian.org/tracker/index.php?func=detail&aid=313252&group_id=100127&atid=413115|Alioth]] | :: Bug: [[https://alioth.debian.org/tracker/index.php?func=detail&aid=313252&group_id=100127&atid=413115|Alioth]] |
Line 29: | Line 31: |
== Done stuff == Use the GPG class to determine uploader (for FTP uploads at least):: :: Owner: daemonkeeper :: Bug: None :: Status: Done, went live in v2 |
|
Line 32: | Line 41: |
:: Status: ? | :: Status: Done, went live in v2 |
Line 34: | Line 43: |
= Bug fixes and improvements = |
|
Line 38: | Line 48: |
Use the GPG class to determine uploader (for FTP uploads at least):: :: Owner: <you?> |
Verify the ownership of the uploaded GPG key:: :: Owner: <you ?> |
Line 41: | Line 51: |
:: Status: Open | :: Status: TODO :: Details: We currently don't check if the GPG key actually is owned by the user. We should make sure that a uid on the key matches the email address of the account, and do some challenge/response to assert ownership of the private key. :: Where to look: `debexpo/controllers/my.py` |
Line 43: | Line 55: |
= Bug fixes and improvements = | Verify the strength of the GPG keys:: :: Owner: <you ?> :: Bug: None :: Status: TODO :: Details: We should check if the keys uploaded to mentors.debian.net are strong enough for inclusion in the debian keyring, and warn the user if it is not. :: Where to look: `debexpo/controllers/my.py` Use GPG to verify the uploader of the package:: :: Owner: <you ?> :: Bug: None :: Status: TODO :: Details: mentors.debian.net associates the uploaded files to an account on the website by using the Changed-By field. We should use the GPG uid instead. :: Where to look: `bin/debexpo_importer.py` Make users accept the DMUP before allowing uploads:: :: Owner: <you ?> :: Bug: None :: Status: TODO :: Details: mentors.debian.net aims at becoming an official Debian service, hosted on Debian hardware. For this to happen, we need among other things that users accept the Debian Machine Usage Policy before allowing them to upload packages. :: Where to look: `debexpo/model/users.py` (database), `debexpo/controllers/my.py` (user interface), `bin/debexpo_importer.py` (pre-import check) |
Line 52: | Line 83: |
Adding comments leads to an "Internal Server Error":: :: Assigned to: Asheesh :: Bug: [[https://alioth.debian.org/tracker/index.php?func=detail&aid=313301&group_id=100127&atid=413115|Alioth]] :: Status: ? |
|
Line 62: | Line 88: |
Remove packages from Expo which have been uploaded to Unstable:: :: Assigned to: daemonkeeper :: Bug: none :: Status: Work in progress |
|
Line 73: | Line 94: |
== Open tasks == | == Done == |
Line 76: | Line 97: |
:: Assigned to: <you ?> | :: Assigned to: olasd |
Line 78: | Line 99: |
:: Status: Done, went live in v2 Remove packages from Expo which have been uploaded to Unstable:: :: Assigned to: daemonkeeper :: Bug: none :: Status: Done, went live in v2 Adding comments leads to an "Internal Server Error":: :: Assigned to: olasd :: Bug: [[https://alioth.debian.org/tracker/index.php?func=detail&aid=313301&group_id=100127&atid=413115|Alioth]] :: Status: Done, went live in v2.2 |
This page is for coordinating and discussing development efforts, currently going on on Expo. While you can add your own ideas here, please note this page is not a wish list.
Please use this page to let other people know, what existing ideas are, and who intends to implement them. If you are looking for work, have a look to our bug list and drop a note if you are working on something - or add yourself here below.
Shiny new features
Open tasks
- Implement the Sponsor Metrics
Owner: <you?>
- Bug: None
More: DebianMentorsNet#Metrics
- Status: Open
- Integrate with Debian Teams
Owner: <you?>
Bug: Alioth
- Status: Open
- Social website idea: add review marking and user ranking to expo and/or ACK
Owner: <you?>
Bug: Alioth
- Status: Open (see RFS comments below)
Tasks being assigned to someone
- Import RFS mailing list comments to Expo
- Owner: daemonkeeper
- Bug: None
- Status: Some efforts have been made
Done stuff
- Use the GPG class to determine uploader (for FTP uploads at least)
- Owner: daemonkeeper
- Bug: None
- Status: Done, went live in v2
- Refactor the plugin infrastructure to increase readability and normalization of outputs
- Owner: olasd
- Bug: None
- Status: Done, went live in v2
Bug fixes and improvements
Open tasks
- Verify the ownership of the uploaded GPG key
Owner: <you ?>
- Bug: None
- Status: TODO
- Details: We currently don't check if the GPG key actually is owned by the user. We should make sure that a uid on the key matches the email address of the account, and do some challenge/response to assert ownership of the private key.
Where to look: debexpo/controllers/my.py
- Verify the strength of the GPG keys
Owner: <you ?>
- Bug: None
- Status: TODO
- Details: We should check if the keys uploaded to mentors.debian.net are strong enough for inclusion in the debian keyring, and warn the user if it is not.
Where to look: debexpo/controllers/my.py
- Use GPG to verify the uploader of the package
Owner: <you ?>
- Bug: None
- Status: TODO
- Details: mentors.debian.net associates the uploaded files to an account on the website by using the Changed-By field. We should use the GPG uid instead.
Where to look: bin/debexpo_importer.py
- Make users accept the DMUP before allowing uploads
Owner: <you ?>
- Bug: None
- Status: TODO
- Details: mentors.debian.net aims at becoming an official Debian service, hosted on Debian hardware. For this to happen, we need among other things that users accept the Debian Machine Usage Policy before allowing them to upload packages.
Where to look: debexpo/model/users.py (database), debexpo/controllers/my.py (user interface), bin/debexpo_importer.py (pre-import check)
Tasks being assigned to someone
- Lost password feature does not work for accounts not activated yet
- Assigned to: Asheesh
Bug: Alioth
- Status: ?
- Add proper archive meta data for repositories (e.g. Sources.gz files)
- Assigned to: Asheesh
- Bug: none
- Status: ?
- Reject certain packages which don't meet the bare essential minimal criterias
- Assigned to: daemonkeeper
- Bug: none
- Status: Staging
Done
- Rework the viewer class to come over HTML display issues
- Assigned to: olasd
- Status: Done, went live in v2
- Remove packages from Expo which have been uploaded to Unstable
- Assigned to: daemonkeeper
- Bug: none
- Status: Done, went live in v2
- Adding comments leads to an "Internal Server Error"
- Assigned to: olasd
Bug: Alioth
- Status: Done, went live in v2.2