<br><br><div class="gmail_quote">On Sun, Jan 22, 2012 at 12:57 P<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Maybe there's a way to make<br>
this more secure, like making session based authorization ? Or that's<br>
what you planned maybe ?<br>
</blockquote>
<br></div>
I'm not sure what you mean, but I'm certainly planning lots of things for the future, assuming things go well. WRT to sessions the app currently uses Pyramid's auth_tkt policy, which configures a session for anyone that authorizes the app on <a href="http://github.com" target="_blank">github.com</a>.<br>
</blockquote><div><br>I meant giving a temporary access to my PyPI packages from within your application when performing tasks, not a complete & permanent one where you application could perform unwanted tasks at PyPI if the server gets hacked.<br>
<br>I am not sure how this could be done practically speaking, it depends on the client UI. <br><br>Cheers<br>Tarek<br><br><br> </div><blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Otherwise cool idea<br>
</blockquote>
<br>
Thanks<br>
<br>
<br>
Alex<br>
<br>
[1] <a href="http://lxc.sourceforge.net/" target="_blank">http://lxc.sourceforge.net/</a><br>
[2] <a href="http://devcenter.heroku.com/articles/config-vars#an_example" target="_blank">http://devcenter.heroku.com/<u></u>articles/config-vars#an_<u></u>example</a><br>
<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">
<br>
Cheers<br>
Tarek<br>
<br>
On Jan 22, 2012 9:04 AM, "Alex Clark" <<a href="mailto:aclark@aclark.net" target="_blank">aclark@aclark.net</a><br></div><div class="im">
<mailto:<a href="mailto:aclark@aclark.net" target="_blank">aclark@aclark.net</a>>> wrote:<br>
<br>
Folks,<br>
<br>
I have created a new service aimed at making it easier to release<br>
Python packages to PyPI. The primary user is currently: me. And to<br>
date, I have only released a single package with it: Pillow (well,<br>
in fact I really only tested a portion of the release process with<br>
Pillow).<br>
<br>
It works like this:<br>
<br>
- I have created a "user" `pythonpackages` on PyPI<br>
- I have uploaded an ssh key [1].<br>
- I have added `pythonpackages` as a maintainer of `Pillow`.<br>
- You can imagine the rest (and if you can't, it's a secret for now.)<br>
<br>
Now, I read the TOS very carefully before creating the<br>
`pythonpackages` "user". And there was nothing in it to indicate<br>
this action is anything other than "fair use". But I want to bring<br>
it to the attention of the PyPI maintainers now, in the event the<br>
service becomes popular later (I know at least I am planning to use<br>
it quite a bit. And we have ~70 beta users signed up to begin testing.)<br>
<br>
The bottom line is: there is now a "user" on the PyPI called<br>
`pythonpackages` that is in fact not a user, but a website<br></div>
(<a href="http://pythonpackages.com" target="_blank">pythonpackages.com</a> <<a href="http://pythonpackages.com" target="_blank">http://pythonpackages.com</a>>). By adding the<div class="im"><br>
"user" `pythonpackages` as a Maintainer to your package, you will be<br></div>
able to use the <a href="http://pythonpackages.com" target="_blank">pythonpackages.com</a> <<a href="http://pythonpackages.com" target="_blank">http://pythonpackages.com</a>><div class="im"><br>
service to automate your release process in some exciting capacity,<br>
to be revealed soon. This is just one aspect of the service I am<br>
building, but it is an important milestone that I wanted to share<br>
(for obvious reasons).<br>
<br>
I welcome any comments/questions/concerns. It is my sincere hope<br>
that at the most, I am not offending anyone with my actions and at<br>
the least, I am not violating any terms or conditions that I don't<br>
know about.<br>
<br>
Sincerely,<br>
<br>
<br>
Alex Clark<br>
<br>
<br></div>
[1] I am using pypissh, <a href="http://pythonpackages.com/__info/pypissh" target="_blank">http://pythonpackages.com/__<u></u>info/pypissh</a><div class="im"><br>
<<a href="http://pythonpackages.com/info/pypissh" target="_blank">http://pythonpackages.com/<u></u>info/pypissh</a>> (many thanks to Martin von<br>
Löwis for this).<br>
<br>
<br>
--<br>
Alex Clark · <a href="http://pythonpackages.com" target="_blank">http://pythonpackages.com</a><br>
<br></div>
______________________________<u></u>___________________<br>
Catalog-SIG mailing list<br>
<a href="mailto:Catalog-SIG@python.org" target="_blank">Catalog-SIG@python.org</a> <mailto:<a href="mailto:Catalog-SIG@python.org" target="_blank">Catalog-SIG@python.org</a><u></u>><br>
<a href="http://mail.python.org/__mailman/listinfo/catalog-sig" target="_blank">http://mail.python.org/__<u></u>mailman/listinfo/catalog-sig</a><br>
<<a href="http://mail.python.org/mailman/listinfo/catalog-sig" target="_blank">http://mail.python.org/<u></u>mailman/listinfo/catalog-sig</a>><div class="im"><br>
<br>
<br>
<br>
______________________________<u></u>_________________<br>
Catalog-SIG mailing list<br>
<a href="mailto:Catalog-SIG@python.org" target="_blank">Catalog-SIG@python.org</a><br>
<a href="http://mail.python.org/mailman/listinfo/catalog-sig" target="_blank">http://mail.python.org/<u></u>mailman/listinfo/catalog-sig</a><br>
</div></blockquote><div class="HOEnZb"><div class="h5">
<br>
<br>
-- <br>
Alex Clark · <a href="http://pythonpackages.com" target="_blank">http://pythonpackages.com</a><br>
<br>
______________________________<u></u>_________________<br>
Catalog-SIG mailing list<br>
<a href="mailto:Catalog-SIG@python.org" target="_blank">Catalog-SIG@python.org</a><br>
<a href="http://mail.python.org/mailman/listinfo/catalog-sig" target="_blank">http://mail.python.org/<u></u>mailman/listinfo/catalog-sig</a><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br>Tarek Ziadé | <a href="http://ziade.org">http://ziade.org</a><br>