Add set_label / unset_label to the DEB PackageViewSet policy
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 71
- Forks
- 91
- Avg merge
- 1d 19h
- Merged PRs (30d)
- 22
Description
The DEB PackageViewSet policy permits only list, retrieve, and create. Therefore, set_label and unset_label return HTTP 403 even for users with core.manage_content_labels.
RPM package endpoints already allow these actions. Adding equivalent DEB policy support, gated by core.manage_content_labels, with permission tests.
This is required to add labels to existing DEB content through the Pulp API without modifying the Pulp database directly.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the DEB PackageViewSet policy and compare it with the RPM package policy, which already permits these actions. Add permission tests for set_label and unset_label using core.manage_content_labels, then verify users with that permission are allowed while others still receive HTTP 403.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- api, authorization
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 72/100