Allow Group Distributions to aggregate from private/internal projects

Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.

• Close this issue

Hello, in the Create a Distribution section of the official documentation for the experimental Debian package registry LINK it is described that:

At the group level, Debian packages are aggregated from the projects in the group provided that:

The project visibility is set to public.
The Debian codename for the group matches the Debian codename for the project.

However, this means that the Debian Group Distributions are effectively useless if the group visibility is set to anything other than public (as the project visibility is stricter or equal to the group visibility).

Therefore, I suggest allowing the Debian Group Distribution is aggregate from distributions where the project's visibility matches the visibility of the group. To continue to guarantee the safety of package registry this would require that access to the Debian Group Distribution is restricted to same level as the group (from what I have been able to gather this is already implemented).

Thank you for taking the time to consider my proposal,

AwesomeDude091

Edit: Grammar