WordPress.org

Making WordPress.org

Opened 7 weeks ago

#5886 new defect

Plugin Directory: Validate submitter is a contributor before allowing plugin submissions

Reported by: Ipstenu Owned by:
Milestone: Priority: normal
Component: Plugin Directory Keywords:
Cc:

Description

The Problem: People sometimes upload plugins that aren't 'theirs' for a number of reasons:

  • They're trying to upload the plugin on their own site and got confused
  • They're submitting the plugin on behalf of someone else
  • They're logged in as the wrong account
  • They're using multiple company accounts to 'get around' the 'one plugin submission at a time' rule
  • The submitter is trying to upload someone else's plugin as if it were their own

A Potential Solution: Check the 'contributors' list on the readme. If their USER ID is not listed, do not permit the upload.

Something like...

"It appears you have submitted a plugin that you did not create yourself. If you meant to upload this to your own site please [read directions link here]. If you're uploading on behalf of someone else, either an individual or a company, they need to upload the plugin themselves. If this is, in fact, your plugin, please make sure you've properly updated the plugin Contributors line in your readme. If you feel you received this message in error, please [email plugins]."

Pros:

  • Would slow down people submitting other peoples plugins
  • Would reduce the burden of Plugin Review having to pedantically check "Is this really their plugin..."
  • Would establish clearer directions regarding having official companies own their own plugins

Cons:

  • Some companies don't use their official account to upload for valid reason (they don't want to give everyone access to that account). The obvious work around would be to add the submitter as a contributor.
  • The block is relatively easy to workaround.

Change History (0)

Note: See TracTickets for help on using tickets.