implement changes from feedback Carla

developer_manual/general/publishing.rst

@@ -5,7 +5,7 @@ App store publishing
 .. sectionauthor:: Jos Poortvliet <jospoortvliet@gmail.com>
 
 The ownCloud App Store
-======================
+----------------------
 The ownCloud app store is build into ownCloud to allow you to get your apps to users as easily and safely as possible. The app store and the process of publishing apps aims to be:
 
 * secure
@@ -23,21 +23,20 @@ Apps in the store are divided in three 'levels' of trust:
 With each level come requirements and a position in the store.
 
 Official
---------
+^^^^^^^^
 Official apps are developed by and within the ownCloud community and its `Github <http://github.com/owncloud>`_ repository and offer functionality central to ownCloud. They are ready for serious use.
 
 Requirements:
-^^^^^^^^^^^^^
 
 * developed in ownCloud github repo
 * minimum of 2 active maintainers and contributions from others
 * security audited and design reviewed
 * app is at least 6 months old and has seen regular releases
 * follows app guidelines
+
 .. * app is signed, identity verified
 
 App store:
-^^^^^^^^^^
 
 * available in Apps page in separate category
 * sorted first in all overviews, 'Official' tag
@@ -49,11 +48,10 @@ note:
 Official apps include those part of the release tarball. We'd like to keep the tarball minimal so most official apps are not part of the standard installation.
 
 Approved
---------
+^^^^^^^^
 Approved apps are developed by trusted developers and have passed a cursory security check. They are actively maintained in an open code repository and their maintainers deem them to be stable for casual to normal use.
 
 Requirements:
-^^^^^^^^^^^^^
 
 * code is developed in an open and version-managed code repository, ideally github with git but other scm/hosting is OK.
 * minimum of one active developer/maintainer
@@ -62,13 +60,14 @@ Requirements:
 * follows app guidelines
 * the developer is trusted
 * app is subject to unannounced security audits
+
 .. * app is signed, at least domain verified
 
 .. note:: **Developer trust**: The developer(s) is/are known in community; he/she has/have been active for a while, have met others at events and/or worked with others in various areas.
 .. note:: **security audits**: in practice this means that at least some of the code of this developer has been audited; either through another app by the same developer or with an earlier version of the app. And that the attitude of the developer towards these audits has been positive.
 
 App store:
-^^^^^^^^^^
+
 * visible in app store by default
 * sorted above experimental apps
 * search results sorted by ratings
@@ -76,31 +75,30 @@ App store:
 * warning shows for security/stability risks
 
 Experimental
-------------
+^^^^^^^^^^^^
 Apps which have not been checked at all for security and/or are new, known to be unstable or under heavy development.
 
 Requirements:
-^^^^^^^^^^^^^
 
 * no malicious intent found from this developer at any time
 * 0 confirmed security problems
 * less than 3 unconfirmed 'security flags'
 * rating over 20/100
+
 .. * app is signed but no verification has to be done
 
 App store:
-^^^^^^^^^^
 
 * show up in Apps page provided user has enabled "allow installation of experimental apps" in the settings.
 * Warning about security and stability risks show for app
 * sorted below all others.
 
 Getting an app approved
-=======================
+-----------------------
 If you want your app to be approved, make sure you fulfill all the requirements and send an email to the ownCloud `development mailing list <http://mailman.owncloud.org/mailman/listinfo/devel>`_. A team of core ownCloud developers will review your application.
 
 Losing a rating
----------------
+^^^^^^^^^^^^^^^
 Apps can lose their rating when:
 
 * they are found to no longer satisfy the requirements
@@ -108,7 +106,7 @@ Apps can lose their rating when:
 * when developer requests so
 
 App guidelines
-==============
+--------------
 These are the app guidelines an app has to comply with to have a chance to be approved.
 
 Legal and security
@@ -117,7 +115,7 @@ Legal and security
 * Apps can not use 'ownCloud' in their name
 * Irregular and unannounced security audits of all apps can and will take place.
 * If any indication of malicious intend or bad fait is found the developer(s) in question can count on a minimum 2 year ban from any ownCloud infrastructure.
- * Malicious intent includes deliberate spying on users by leaking user data to a third party system or adding a back door (like a hard-coded user account) to ownCloud. An unintentional security bug that gets fixed in time won't be considered bad faith.
+   * Malicious intent includes deliberate spying on users by leaking user data to a third party system or adding a back door (like a hard-coded user account) to ownCloud. An unintentional security bug that gets fixed in time won't be considered bad faith.
 * Apps do not violate any laws; it has to comply with copyright- and trademark law.
 * App authors have to respond timely to security concerns and not make ownCloud more vulnerable to attack.