#911: Package uploading is completely unsecured
-------------------------------+--------------------------------------------
Reporter: bgamari | Owner:
Type: defect | Status: new
Priority: high | Milestone:
Component: Hackage 2 server | Version: 1.8.0.6
Severity: major | Keywords:
Difficulty: unknown | Ghcversion:
Platform: |
-------------------------------+--------------------------------------------
Comment(by AntoineLatter):
It's been a while since I tested this, but I think we already lock down
uploading to existing packages - the only thing un-restricted is uploading
new packages.
So part of this is still a problem.
I think at some point there was code to edit the list of 'uploaders' for a
package, but I don't know where that is now.
--
Ticket URL: <http://hackage.haskell.org/trac/hackage/ticket/911#comment:2>
Hackage <http://haskell.org/cabal/>
Hackage: Cabal and related projects
_______________________________________________
cabal-devel mailing list
cabal-devel@haskell.org
http://www.haskell.org/mailman/listinfo/cabal-devel
