A (hopefully accurate) conclusion of a recent IRC discussion (07/14/2013, Terri Oda, Stephen Turnbull, Richard Wackerbarth, Florian Fuchs) on the subject:
*For now*, private lists should be displayed in the list index, if the logged-in user is:
- a superuser
- a member/owner/moderator of that list.
BUT: Private list index items need to be displayed in a way that makes it clear to the logged-in user that the list will not be displayed to non-members.
In the long term Stephen suggested a feature like "named policies" in order to improve the simple public/private distinction. For instance this could add a more strict level of secrecy to the the list options (never shown in list index, shorter session lifetime etc...).
A (hopefully accurate) conclusion of a recent IRC discussion (07/14/2013, Terri Oda, Stephen Turnbull, Richard Wackerbarth, Florian Fuchs) on the subject:
*For now*, private lists should be displayed in the list index, if the logged-in user is:
- a superuser owner/moderator of that list.
- a member/
BUT: Private list index items need to be displayed in a way that makes it clear to the logged-in user that the list will not be displayed to non-members.
In the long term Stephen suggested a feature like "named policies" in order to improve the simple public/private distinction. For instance this could add a more strict level of secrecy to the the list options (never shown in list index, shorter session lifetime etc...).