[katello-devel] importing manifests with the "force" flag

[Devan Goodwin]

On Wed, Jun 27, 2012 at 11:17 AM, Bryan Kearney <bkearney at redhat.com> wrote:
> On 06/27/2012 09:38 AM, Devan Goodwin wrote:
>>
>> I believe the creation date is the only thing force buys you, and
>> indeed an older manifest should not normally be usable unless
>> something went wrong with the new one. The force flag has kind of run
>> off the rails. It was requested for development purposes if I recall
>> correctly, but there is definitely no reason I can think of it should
>> be allowed for end users.
>
>
> If we turn back on checking the signature, and the checks for type, then it
> will become relevant again.
>
> - bk
>

What's the use case where an end user would want to bypass date checking?

Same question for bypassing signature checking. (that one is even more
scary to me, what on earth would someone be doing to need that?) :)

Seems to me that force should be hidden from view, and possibly not be
there at all.