MIME-Version: 1.0
References: <1d060463-e562-7783-decd-b5a7f3c4c06c@cmatte.me>
In-Reply-To: <1d060463-e562-7783-decd-b5a7f3c4c06c@cmatte.me>
From: Magnus Hagander <magnus@hagander.net>
Date: Sun, 30 Jan 2022 13:20:30 +0100
Message-ID: 
 <CABUevEyBc9+zspBNE_TgKwtURKeuAsf++Wgszb8rnpDu=KPdKQ@mail.gmail.com>
Subject: Re: [PATCH] pgarchives: pglister_sync: import lists with
 subscriber_access set to True
To: =?UTF-8?Q?C=C3=A9lestin_Matte?= <celestin.matte@cmatte.me>
Cc: PostgreSQL WWW <pgsql-www@lists.postgresql.org>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: 
 <https://www.postgresql.org/message-id/CABUevEyBc9%2BzspBNE_TgKwtURKeuAsf%2B%2BWgszb8rnpDu%3DKPdKQ%40mail.gmail.com>
Precedence: bulk

On Fri, Jan 28, 2022 at 6:37 PM C=C3=A9lestin Matte <celestin.matte@cmatte.=
me> wrote:
>
> pglister_sync.py is a script used to synchronize things between pglister =
and pgarchives: lists, subscribers etc.
>
> subscriber_access is not set in pglister_sync's query, and is set to null=
=3DFalse in Django's model. As a consequence, pglister_sync fails to add ne=
w lists:
> Traceback (most recent call last):
>   File "/srv/pgarchives/local/loader/pglister_sync.py", line 68, in <modu=
le>
>     'groupname': l['group']['groupname'],
> psycopg2.errors.NotNullViolation: null value in column "subscriber_access=
" violates not-null constraint
> DETAIL:  Failing row contains (8, test-pglister-sync, test-pglister-sync,=
 , t, 1, null).
>
> I don't know if there is a way to configure postgres to use the default v=
alue , but I think it would be wiser to explicitly set this variable in pgl=
ister_sync.py.

Interesting. Yes there is, set the columns default to false. Which is
what is running on both our production servers for postgresql.org --
but I'm unsure how it actually got there given that Django is dumb
enough not to propagate that down to the database, assuming all access
will forever be through the ORM. We must've done some manual step when
deploying that, that has since been forgotten.

This should definitely be fixed.

> By default, subscriber_access is set to False and there is no way to modi=
fy that within the web interface.
> As a consequence, access to lists on private servers is restricted to sup=
erusers, and there is no easier way to modify that than to edit the databas=
e manually.
>
> It seems more logical to me that this value be set to True by default, as=
 access can still be moderated to avoid lists being publicly available.

In what way would access "still be moderated"? In pgarchives, that's a
pure boolean and there are no further checks. User accounts are
auto-created.

The idea is that anything that's "open" should have to be set
explicitly and thus we should default to it being off. Based on that I
have at least initially applied a version of your patch that sets it
to false.


> That said, it may be better to have a way to modify that within the web i=
nterface in pglister.

I agree in principle. The argument does fall off a bit on the fact
that there is *no* admin interface to pgarchives. You don't have a way
to add a list manually either, without doing it directly in SQL. So we
either accept that SQL is the way things are done, or we should tackle
the bigger problem of setting up such an interface. But I think we
could get pretty far by just enabling the general django admin
interface and set up the required classes for that -- we don't
necessarily need to move things like reparsing and hiding of messages
into such an admin interface.

--=20
 Magnus Hagander
 Me: https://www.hagander.net/
 Work: https://www.redpill-linpro.com/