[wp-meta] [Making WordPress.org] #5886: Plugin Directory: Validate submitter is a contributor before allowing plugin submissions
Making WordPress.org
noreply at wordpress.org
Thu Sep 2 16:31:00 UTC 2021
#5886: Plugin Directory: Validate submitter is a contributor before allowing
plugin submissions
------------------------------+--------------------
Reporter: Ipstenu | Owner: (none)
Type: defect | Status: new
Priority: normal | Milestone:
Component: Plugin Directory | Keywords:
------------------------------+--------------------
**The Problem:** People sometimes upload plugins that aren't 'theirs' for
a number of reasons:
* They're trying to upload the plugin on their own site and got confused
* They're submitting the plugin on behalf of someone else
* They're logged in as the wrong account
* They're using multiple company accounts to 'get around' the 'one plugin
submission at a time' rule
* The submitter is trying to upload someone else's plugin as if it were
their own
**A Potential Solution:** Check the 'contributors' list on the readme. If
their USER ID is not listed, do not permit the upload.
Something like...
"It appears you have submitted a plugin that you did not create yourself.
If you meant to upload this to your own site please [read directions link
here]. If you're uploading on behalf of someone else, either an individual
or a company, they need to upload the plugin themselves. If this is, in
fact, your plugin, please make sure you've properly updated the plugin
Contributors line in your readme. If you feel you received this message in
error, please [email plugins]."
**Pros:**
* Would slow down people submitting other peoples plugins
* Would reduce the burden of Plugin Review having to pedantically check
"Is this really their plugin..."
* Would establish clearer directions regarding having official companies
own their own plugins
**Cons:**
* Some companies don't use their official account to upload for valid
reason (they don't want to give everyone access to that account). The
obvious work around would be to add the submitter as a contributor.
* The block is relatively easy to workaround.
--
Ticket URL: <https://meta.trac.wordpress.org/ticket/5886>
Making WordPress.org <https://meta.trac.wordpress.org/>
Making WordPress.org
More information about the wp-meta
mailing list