new features in package CVS

[Bill Nottingham]

Tonight we're planning on deploying a couple of new features in
CVS for packages. If you read the FESCo meeting notes, you've
already heard about them.

1) ACLs

To add an ACL to your package, add a 'pkg.acl' file to either
the package toplevel, or to a particular branch, such as FC-6
or devel. ACLs are inherited; branches will inherit ACLs from
the toplevel.

The ACL file format is simply a list of account names, one per
line. You can add comment lines with '#'.

Access is determined as follows:

  No pkg.acl file: all are allowed access

  Empty pkg.acl file: only the package owner [1] is allowed access.

  Populated pkg.acl file: only the package owner and those in
  the file are allowed access.

pkg.acl files can only be added/deleted/modified by the package
owner.

As part of this change, there are two changes to how certain
processes will work:

  - owners.list and owners.epel.list are now locked down. To request
  changes, please send mail to cvsadmin-members at fedoraproject.org.
  (This may be replaced with the wiki or the ticketing system really
  fast.)

  - packages, by default, on import will have a empty pkg.acl added.
  These can be removed by the owner if they truly wish.

2) E-mail notification

By defalt, e-mail notification will now be sent on all package
commits to the package owner, and any co-maintainers listed in
the pkg.acl files. The format will be exactly the same format
as is sent to the commits list.

Bill

[1] 'Package owner' is defined as the union of the owners listed in
owners.list and owners.epel.list