#91 — Uploading to private repository

Hi Tarek and Alex,

first a big thanks for the PyPI features in PSC.

Today, I came across the following issue setting up a private repository. When locking down the view permission so anonymous users can't access anything on the site I noticed that uploads via mregister/mupload (added by iw.dist) take ages to complete. While it works in the end I see 'Unauthorized' exceptions on '.../catalog/submit/submit' in the site log (catalog is a PSC instance).

As a workaround I changed the permission set in zcml for 'submit' to 'zope2.Public' but this feels wrong to me. I'd much rather prefer it if the upload would not hang but authenticate right away - as it somehow does later anyway or else the upload would fail completely.

Browsing through the code in PyPIView I got the impression that its 'fail' method should handle this but somehow I don't see the forest for the trees :-(

Maybe 'submit' should have a dedicated permission set?

Maybe I'm addressing this from the wrong end?