Revision
1709 -
(
view)
(
download)
(
as text)
(
annotate)
-
[select for diffs]
Modified
Wed Mar 3 08:49:22 2010 UTC
(3 years, 2 months ago)
by
lucas
File length: 1073 byte(s)
Diff to
previous 1704
Attempt to solve the privacy problems with PTS subscribers data
- drop the pts_public table completely. PTS subscribers data isn't available
from non-DDs anymore. Using the guestdd account is required to access it.
- change the CGI to use the guestdd account. The rest of the functionality of
the CGI isn't changed.
Consequences:
The pts_public table (which contained the (package, md5(email)) list) doesn't
exist anymore. Only the pts table (which contains the non-hashed version
remains, but this table is only accessible using the guestdd account, whose
password is only available to DDs.
The CGI still exists, and still provide the same information. I still believe
that the information it provides is reasonable (see
http://lists.debian.org/debian-project/2010/03/msg00011.html).
It is harder to use that data from !samosa.debian.org, but we can probably
live with it.