Re: Distribution names are not unique. We need to figure out what to do about it.

On Thu, Mar 14, 2013 at 1:31 AM, David Golden <[email protected]> wrote:
> (2) rt.cpan.org treated both distributions as having the same RT
> queue. I gained administrative access to BinGOs' existing queues.

Just to make it clear. rt.cpan.org uses distribution name as queue
identifier and
expects it uniquelly identify a "project". For sync it uses files
available on every
CPAN mirror.

Here is what happened. As you've uploaded a distribution X (fake) with
module FOO and
that module is not in original X then you got your permissions on FOO.
Permissions are
per module, not per distribution. CPAN2RT just maps permissions to
modules, modules to distributions and grants collected set of authors
maintainership of the distribution's queue.

rt.cpan.org would win for sure from a new meta information DB
published to CPAN mirrors. For example meta.sqlite.db that contains
distributions' info, releases' info (versions), authors' info,
maintainers per distribution, modules per distribution. I think it's
all rt.cpan.org needs at this moment.

-- 
Best regards, Ruslan.