sbp opened a new issue, #60:
URL: https://github.com/apache/tooling-trusted-release/issues/60

   These are the highest priority ATR issues that I have been privately 
tracking, ordered from highest to lowest priority. We should select which of 
these items to convert into GitHub issues. Once created, these new issues 
should be tracked under the main ATR development tracking issue #31. Please 
edit this issue and change `[x]` to `[ ]` against any items that we should 
_not_ currently schedule.
   
   - [x] **Add CSRF protection**
     Critical bug. Any form which does not use GET should be protected.
   
   - [x] **Disallow rolling back from preview to draft revisions**
     Critical bug. This ability was introduced when extending revisions to the 
Finish phase, with the intention that it be removed.
   
   - [x] **Do not promote if a later revision has been made**
     Critical bug. The revision mechanism allows us to remove the intermediate 
phases, but only if this safeguard was implemented. It has not yet been 
implemented.
   
   - [x] **Stop moving a file from removing empty directories**
     Bug. The file move operation should not delete empty parent directories in 
the Finish phase. We would also need to provide users with the ability to 
explicitly create and remove directories.
   
   - [x] **Display signing keys properly on project pages**
     Bug. There is a section for such keys, but the section is always empty 
even if the project has signing keys.
   
   - [x] **Handle form errors on all forms properly**
     Bug. Some forms handle errors and display errors inline, and some don't. 
We should be consistent about this and show all errors inline correctly.
   
   - [x] **Fix and improve the License Header check**
     Bug and enhancement. We already discussed improving this, but it's 
currently broken entirely so needs fixing before it can be improved.
   
   - [x] **Use tabs to view email previews instead of the details element**
     Enhancement. Would greatly improve usability.
   
   - [x] **Improve the KEYS generation workflow**
     Enhancement. There should be links to add KEYS elsewhere. We may also want 
to consider automatically importing a KEYS file if it is accidentally uploaded.
   
   - [x] **Allow intermediate directories in the form to move files**
     Bug. If a path such as `a/b/c` exists, `a/b` is not offered as a 
destination choice when moving a file.
   
   - [x] **Remove stages**
     Refactoring. We don't currently use stages anywhere. There are, however, 
more stages than there are phases, and we will want to implement the other 
stages. Perhaps we should unify stages into phases?
   
   - [x] **Fix the line height of headings**
     Bug. It's too shallow, and displays incorrectly when wrapping.
   
   - [x] **Treat mail sending issues as a warning**
     Enhancement.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@tooling.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tooling.apache.org
For additional commands, e-mail: dev-h...@tooling.apache.org

Reply via email to