Bodhi updates-testing Autopush, Anonymous Commenting

[Warren Togami]

This thread contains only strawman ideas to solicit ideas and opinions 
for Bodhi.

NOTE: This mail talks only about how updates-testing tickets in bodhi 
behave after they become updates-testing.  The controversial matter of 
whether a package is required to go into updates-testing is a separate 
matter to be discussed and ratified during Thursday's FESCo meeting.

Idea: updates-testing Autopush after Timeout
============================================
1) Bodhi should auto-push updates-testing after a time-out period.
2) Bodhi interface allows others to comment on the goodness/badness of a 
test update.
3) Bodhi interface allows others to declare a test update broken, which 
freezes the auto-push after timeout.
4) Package maintainer or admins can override this and push anyway.

Idea: Timeout Default, Configurable?
====================================
Default updates-testing timeout is 7 days.  Package maintainer may set a 
different timeout period (i.e. 4, 9 or 14 days), or turn off the timeout 
entirely.

Idea: Anonymous Commenting
==========================
Update and updates-testing announcement mail will have links to the 
Bodhi ticket where users can comment on their experiences with that 
package.  This should do good to improve communications between users 
and developers, and also be handy for users to know more details about 
the effect an updated package will have on their system.

(Perhaps not a link to the Bodhi ticket, but a separate comment-and-view 
URL... lmacken can decide on this as an implementation detail.)

Currently commenting on an update in bodhi requires you to have a FAS 
account, which can be inconvenient for the majority of Fedora users.  We 
could potentially allow more convenient commenting to the public through 
  some other means.

http://en.wikipedia.org/wiki/Captcha
Users not authenticated through FAS are given the option to type in a 
CAPTCHA string, which allows them to comment without authenticating.  A 
CAPTCHA should be sufficient to control spam.

Warren Togami
wtogami at redhat.com