Comments (6)
Original comment by @hpk42
we need to think about how to keep indices relations consistent. Could you maybe jump on IRC to #devpi on irc.freenode.net?
from devpi.
Original comment by @hpk42
Should index deletion be rejected when someone else inherits from it?
from devpi.
Original comment by @lbrack
That's a good question. It does make sense to reject it if someone inherits from it (at least another user).
But then, the draw back is if I create myself a sandbox, someone sees it and uses it as base, then I would have to chase that person around.
So I am wondering if we could do the following:
I am thinking in the line of public, protected and private.
- public means that anyone can see it, and use it as a base
- protected means that everyone can see it but can not use it as a base
- private only the owner see this (maybe this is too much)
But again, we are adding complexity which might not be needed.
However I can see a scenario where Jane inherits from one of my index. I don't know she does, and delete my index, messing her environment.
Even worst, we have the GTI prod index, and someone, by accident deletes it. Ouch.
from devpi.
Original comment by @hpk42
What about preventing deletion of an index that is non-volatile? Volatile so far means that you can overwrite releases and release files on upload but we can extend the meaning to make an index non-volatile. a Prod index would be non-volatile. I just switched even hpk/dev to non-volatile.
from devpi.
Original comment by @lbrack
Yup. It makes a lot of sense. A dev index is by definition something that is subject to flux.
so basically if an index is non-volatile and is a base to another index, it can't be deleted. Obviously could change from non-volatile to volatile but at least there is some warning.
from devpi.
Original comment by @lbrack
One other thing to keep in mind. Deleting a user that has a non-volatile index which is used by someone else should be forbidden.
I will add a test case as a reminder
from devpi.
Related Issues (20)
- [discussion] Asyncio speedups HOT 7
- docs zip contains unwanted package source files HOT 3
- [client] upload `OSError: [Errno 18] Invalid cross-device link '/tmp/devpi-…/dist/….whl' -> 'dist/….whl'` HOT 2
- Cannot load packages when use base auth in gitlab registry mirror HOT 4
- Need help upgrading from 4.4.0 to current HOT 3
- Incorrect version given to doczip with devpi-client version 7.0.0 HOT 7
- All >400 HTTP responses from login provoke a SystemExit, not using fatal, and are not always fatal errors for login HOT 1
- Errors when sharing package files HOT 8
- Option to have the latest available documentation displayed, when a package has no docs HOT 2
- Support PEP 658 / PEP 714 HOT 8
- HTTP error 502 while retrieving a wheel file HOT 6
- Return HTTP 406 instead of HTTP 404 when `Accept` cannot be fulfilled HOT 4
- Support range requests when downloading files HOT 3
- Connection failures when downloading wheels HOT 6
- Devpi test fails with something related to build(i assume) HOT 6
- Support for newer packaging HOT 2
- AttributeError: type object 'PersistentCurrent' has no attribute 'auth' HOT 3
- Mirroring fails for packages with hashes other than sha256 HOT 7
- Failed to upload tensorflow wheel with 400 error HOT 7
- Provide an aiohttp-less version for server HOT 15
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from devpi.