reporangler / auth-service

A webservice to handle authentication for repository access
MIT License
0 stars 0 forks source link

It's possible to remove package group access to 'public' #16

Open christhomas opened 5 years ago

christhomas commented 5 years ago

It's technically possible to remove a users access to the public package group. Is this something I should maybe prevent by having a check in the code? But what if the public group isn't called public in all installations? Then I'd not be able to hardcode, or put a check in there for this.

So how should I handle this?