Skip to content

Error 403: The user isn't allowed to upload to project - See project-name, but project Name is available. #4153

Open
@Cyb3rWard0g

Description

@Cyb3rWard0g

Describe the bug
Hello PyPI Administrators!

I hope you are all doing well. Thank you for all the hard work and making PyPi possible.

I am Cyb3rWard0g in PyPi. I am the owner of one project named attackcti. I am now working on another public project that I will be releasing soon. The new project name is floki. Initially when I looked for that name in the main PyPi index, there was not a project with that name. However, when I checked the PyPi test index, there was a project named "floki" already, I was able to contact the owner of the project and he agreed to delete the test project since it was just a testing package.
When I try to upload my floki project, now that there is not a project with that name in main and test Index, I still get the message

HTTP Error 403: The user 'Cyb3rWard0g' isn't allowed to upload to project 'floki'. See https://pypi.org/help/#project-name for more information. | b"<html>\n <head>\n  <title>403 The user 'Cyb3rWard0g' isn't allowed to upload to project 'floki'. See https://pypi.org/help/#project-name for more information.

I am using a token that has permissions to upload to any project in my account. This is a new project. Based on the additional context in the error message, it is related to the name of the project and not the permissions to upload a project. To validate this assumption, I tried to set up a Trusted Publisher Management for the new project and I get the following message:

image

So, it is obvious that the error is related to the name of the project and not to permissions required to upload projects to my account.

Questions:

  • Do I have to wait a specific amount of time to upload my project? Taking in consideration that there was another project before with the same name and author agreed to delete it?
  • Is deleting the project enough to make the name available? how does that work?
  • Is the name maybe still cached in the PyPi index? I know the name is available and it was not denied in the first place when the other user created it so there should not be a restriction to use that name right?

just making sure I understand what is going on :)

Thank you for your time!

Expected behavior
Project created in PyPi

To Reproduce
Created a project in PyPi Test Index with a specific name
Delete project from PyPi Test Index
Create a new project in PyPi index with the same name as the deleted project

Additional context

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions