Adding limit options for the package registry #20471
Labels
topic/packages
type/feature
Completely new functionality. Can only be merged if feature freeze is not active.
type/proposal
The new feature has not been accepted yet but needs to be discussed first.
Comments
Mai-Lapyst
added
type/feature
lunny
added a commit
that referenced
this issue
Nov 9, 2022
Related #20471 This PR adds global quota limits for the package registry. Settings for individual users/orgs can be added in a seperate PR using the settings table. Co-authored-by: Lauris BH <lauris@nix.lv> Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Feature Description
Currently, when the package registry is enabled, all users are allowed to upload packages to their profile. This cannot currently be limited to prevent users from uploading arbitary numbers of packages or similar exploits.
Because there exists limitation options for repositories & organizations, packages should have similar options as well.
My idea consists of three limiting options:
MAX_CREATION_LIMITlimits the amount an user/org can have overallMAX_UNLINKED_LIMITlimits the amount an user/org can have that are not linked to an repositoryMAX_PACKAGES_PER_REPO_LIMITlimits the amount an repository can haveIt could also be added that individual settings on users/org's and repos are possible to allow exceptions to the default limits provided by the config.
If there are no takers, I would submit an PR for this feature.
Screenshots
No response
The text was updated successfully, but these errors were encountered: