Comment 3 for bug 58297
Revision history for this message
| Curtis Hovey (sinzui) wrote Re: Making a project part of a project group should require project group owner's approval | #3 |
© 2004
Canonical Ltd.
•
Terms of use
•
Data privacy
•
Contact Launchpad Support
•
Blog
•
Careers
•
System status
•
0e1f616
(Get the code!)
I am not certain knobs are enough. We could add bool to toggle between inclusive and exclusive behaviour. The current behaviour is inclusive where the project adds itself to the group. The exclusive behaviour would only permit adding project to the group from the group's perspective. The exclusive would used a new method on project group and the Ui might user a project picker.
I think this is a hack to address the immediate concern of forging a relationship to socially engineer an attacks.
Projects do not like the limit being a member of one project group. A project might want to be a member of python, twisted, and gnome project groups. A project might want to be a member of several of it's organisation's exclusive groups such a project that is both OEM and PES. Maybe we want to split this bug into several to address the different concerns.