restrict user/indexnames for 3.0!?
Hey all,
we are preparing a devpi-server-3.0 beta with a lot of interesting features and speedups. One thing we'd still like to do is to restrict user and index naming. Currently we are thinking about only allowing:
[a-z0-9A-Z_-]*
Could you tell/verify if this matches your current installations? What more characters would you like to see?
We can mangle characters when we import 2.X state into 3.X and probably also do redirects in the READ web interface (as used by pip) so it should be seamless even if some indexes use odd characters.
best, holger
Hi Holger, hi all
Overall I think restricting the user and index names is the proper way to go.
On our installation we are using the dot (.) in addition the characters suggested by you. If that character would no longer be legal in 3.X this would make the migration rather painful for us, as we store references to the indices in external systems. Thus, we would require names matching following regex to be valid:
[a-z0-9A-Z_.-]*
I am not convinced that mangeling would work to well for us, as it would increase the amount of requests performed during `pip install`, causing a lot of additional traffic and load.
Kind Regards, Matthias
On Thu, Feb 04, 2016 at 14:56 +0100, Matthias Bach wrote:
Hi Holger, hi all
Overall I think restricting the user and index names is the proper way to go.
On our installation we are using the dot (.) in addition the characters suggested by you. If that character would no longer be legal in 3.X this would make the migration rather painful for us, as we store references to the indices in external systems. Thus, we would require names matching following regex to be valid:
[a-z0-9A-Z_.-]*
I am not convinced that mangeling would work to well for us, as it would increase the amount of requests performed during `pip install`, causing a lot of additional traffic and load.
I see the point. I think we can just allow "." and maybe also ":" and even extend it if needed during the 3.0.X series. What about mandating that a user/index starts with [a-zA-Z]?
Florian suggests on IRC that we rather do a blacklist like::
whitespace and [+/\<>"']
which might be the most compatible approach and also supports unicode names.
holger
Kind Regards, Matthias
-- Dr. Matthias Bach Senior Software Engineer *Blue Yonder GmbH* OhiostraÃe 8 D-76149 Karlsruhe
Tel +49 (0)721 383 117 6244 Fax +49 (0)721 383 117 69
matthi...@blue-yonder.com www.blue-yonder.com Registergericht Mannheim, HRB 704547 USt-IdNr. DE DE 277 091 535 Geschäftsführer: Jochen Bossert, Uwe Weiss (CEO)
-- You received this message because you are subscribed to the Google Groups "devpi-dev" group. To unsubscribe from this group and stop receiving emails from it, send an email to devpi-dev+...@googlegroups.com. To post to this group, send email to devp...@googlegroups.com. Visit this group at https://groups.google.com/group/devpi-dev. For more options, visit https://groups.google.com/d/optout.
Hi,
Am 04.02.2016 um 15:33 schrieb holger krekel:
What about mandating that a user/index starts with [a-zA-Z]?
This would work for us.
Regards, Matthias
Hi Holger,
On Feb 4, 2016, at 3:15 AM, holger krekel hol...@merlinux.eu wrote:
Hey all,
we are preparing a devpi-server-3.0 beta with a lot of interesting features and speedups. One thing we'd still like to do is to restrict user and index naming. Currently we are thinking about only allowing:
[a-z0-9A-Z_-]*
Could you tell/verify if this matches your current installations?
It does.
What more characters would you like to see?
None from our standpoint. The simpler the better.
We can mangle characters when we import 2.X state into 3.X and probably also do redirects in the READ web interface (as used by pip) so it should be seamless even if some indexes use odd characters.
best, holger
Cheers/Laurent
-- about me: http://holgerkrekel.net/about-me/ contracting: http://merlinux.eu
-- You received this message because you are subscribed to the Google Groups "devpi-dev" group. To unsubscribe from this group and stop receiving emails from it, send an email to devpi-dev+...@googlegroups.com. To post to this group, send email to devp...@googlegroups.com. Visit this group at https://groups.google.com/group/devpi-dev. For more options, visit https://groups.google.com/d/optout.
participants (3)
-
holger krekel -
Laurent Brack -
Matthias Bach