[wp-meta] [Making WordPress.org] #5886: Plugin Directory: Validate submitter is a contributor before allowing plugin submissions

Making WordPress.org noreply at wordpress.org
Thu Sep 2 16:31:00 UTC 2021


#5886: Plugin  Directory: Validate submitter is a contributor before allowing
plugin submissions
------------------------------+--------------------
 Reporter:  Ipstenu           |      Owner:  (none)
     Type:  defect            |     Status:  new
 Priority:  normal            |  Milestone:
Component:  Plugin Directory  |   Keywords:
------------------------------+--------------------
 **The Problem:** People sometimes upload plugins that aren't 'theirs' for
 a number of reasons:

 * They're trying to upload the plugin on their own site and got confused
 * They're submitting the plugin on behalf of someone else
 * They're logged in as the wrong account
 * They're using multiple company accounts to 'get around' the 'one plugin
 submission at a time' rule
 * The submitter is trying to upload someone else's plugin as if it were
 their own

 **A Potential Solution:** Check the 'contributors' list on the readme. If
 their USER ID is not listed, do not permit the upload.

 Something like...

 "It appears you have submitted a plugin that you did not create yourself.
 If you meant to upload this to your own site please [read directions link
 here]. If you're uploading on behalf of someone else, either an individual
 or a company, they need to upload the plugin themselves. If this is, in
 fact, your plugin, please make sure you've properly updated the plugin
 Contributors line in your readme. If you feel you received this message in
 error, please [email plugins]."

 **Pros:**

 * Would slow down people submitting other peoples plugins
 * Would reduce the burden of Plugin Review having to pedantically check
 "Is this really their plugin..."
 * Would establish clearer directions regarding having official companies
 own their own plugins

 **Cons:**

 * Some companies don't use their official account to upload for valid
 reason (they don't want to give everyone access to that account). The
 obvious work around would be to add the submitter as a contributor.
 * The block is relatively easy to workaround.

-- 
Ticket URL: <https://meta.trac.wordpress.org/ticket/5886>
Making WordPress.org <https://meta.trac.wordpress.org/>
Making WordPress.org


More information about the wp-meta mailing list