wip

epdb/logic.py

@@ -581,6 +581,9 @@ class PackageManager(object):
         if caller_perm != Permission.ALL[0] and not caller.is_superuser:
             raise ValueError("Only owner are allowed to modify permissions")
 
+        if isinstance(grantee, Group) and package.classification_level == package.Classification.SECRET:
+            raise ValueError("Cannot grant permissions to a Group on a secret package")
+
         data = {
             "package": package,
         }