Comment 1 for bug 259159

From Elliot:

There is an apache module written in python that handles the openID
authentication. For each protected directory, the plugin reads from two
files: one to get a list of teams to query membership in, and one to get
a list of teams that are authorized to access the directory.

Conceptually, this should be a single list, but it is not due to some
awkwardness in how apache configs are specified and how openID endpoints
work, they are separate - it might be possible to collapse them but I've
not thought very hard about it yet.

I imagine changing this apache module to be able to work in an automated
way would involve changing it to do lookups of each directory it serves
against a database rather than reading from a text file, and getting the
list of team names from the DB. Then, launchpad would write to the DB
table in order to specify the teams which were allowed to access a
particular archive. Probably 1 day of work or less.

I'd volunteer to do a preimplementation call with someone working on
this module, as I've helped Tom Haddon debug it in the past and have it
running on my home apache server right now.