sbp opened a new issue, #1354:
URL: https://github.com/apache/tooling-trusted-releases/issues/1354

   The announcement form should contain a mandatory "Download page URL" field 
between "Download path suffix" and "Confirm", but this should _only_ be shown 
if the download page URL is not already set in project metadata. On submission 
it should be checked for 200 response and then added to project metadata. If 
the URL isn't present or doesn't return a 200, then the form must fail using 
the standard ATR form error mechanism.
   
   There could be a race condition where somebody is announcing a _different_ 
release and fills in the metadata URL before the present form is submitted. 
This would be very unlikely, but should be resolved by either silently 
discarding the value if it matches the value already in the database (without 
doing a 200 check), or by giving an informational flash to the user saying that 
the project already received a different download page URL before the form was 
submitted (and also skipping the 200 check).
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to