devops-csmake / csmake-providers

Providerrs (inputs/outputs) for csmake
GNU General Public License v3.0
0 stars 1 forks source link

PypiFacade constrained files are downloadable in some cases #8

Open autumnpat opened 7 years ago

autumnpat commented 7 years ago

Scenario:

A mirror (myfullmirror) has several versions of a package (say the package is myxyzzy): myxyzzy_1.tar.gz myxyzzy_2.tar.gz myxyzzy_3.tar.gz myxyzzy_4.tar.gz

Set up PypiFacade just to mirror myfullmirror and pull the index for myxyzzy

Now, set up a second context that still points to myfullmirror (or somewhere else even), and constrain it to myxyzzy<3. The index will correctly only show 1 and 2 but you can still download 3 and 4. The test case test_startServerFromScratch starting at or around 1391 at the time of this writing that is commented out that will demonstrate this behavior.

autumnpat commented 7 years ago

https://github.com/csmake-hpe/csmake/issues/1