
#239: security hole: anyone can replace a package --------------------------------+------------------------------------------- Reporter: guest | Owner: Type: defect | Status: new Priority: normal | Milestone: Component: HackageDB website | Version: Severity: normal | Resolution: Keywords: | Difficulty: normal Ghcversion: 6.8.2 | Platform: --------------------------------+------------------------------------------- Comment (by guest): Yes, let it be overridden by a trusted admin type person. And let me say who I think can upload my package. But I shouldn't be allowed to upload a package on behalf of someone else without them knowing. -- Ticket URL: http://hackage.haskell.org/trac/hackage/ticket/239#comment:5 Hackage http://haskell.org/cabal/ Hackage: Cabal and related projects