It's both hard to document and hard to follow to provide commands where you can specify your own config file, but then you have to specify that config file every single time for every command afterwards.

We know people are going to write their own config files... we've already .gitignore'd paste_local.ini and mediagoblin_local.ini. When no config file is passed in, we should make it so that it checks for and uses mediagoblin_local.ini first and if that doesn't exist uses mediagoblin.ini. This will allow for a simple way for users to configure mediagoblin and be able to run commands without accidentally running them on the wrong (non-custom) config files, and reduce a certain amount of verbage in our docs.

media_post_comment blindly takes the media id from matchdict['media'], which is just filled in from the POST URL. So by faking up a POST URL one can add comments for non existent media.

I think a simple get_user_media_entry decorator and a little rewriting should do the trick.

Priority High: This can be used to fill the db with invisible cruft! Estimated Time 1.5 h: The code change is done in 10 minutes, but testing it requires to either write test code or fiddle with yuor browser

URL: http://127.0.0.1:6543/favicon.ico
File '/home/cwebber/devel/mediagoblin/lib/python2.6/site-packages/Paste-1.7.5.1-py2.6.egg/paste/exceptions/errormiddleware.py', line 144 in __call__
  app_iter = self.application(environ, sr_checker)
File '/home/cwebber/devel/mediagoblin/lib/python2.6/site-packages/Paste-1.7.5.1-py2.6.egg/paste/urlmap.py', line 203 in __call__
  return app(environ, start_response)
File '/home/cwebber/devel/mediagoblin/lib/python2.6/site-packages/Beaker-1.5.4-py2.6.egg/beaker/middleware.py', line 152 in __call__
  return self.wrap_app(environ, session_start_response)
File '/home/cwebber/devel/mediagoblin/mediagoblin/app.py', line 140 in __call__
  request.locale = translate.get_locale_from_request(request)
File '/home/cwebber/devel/mediagoblin/mediagoblin/tools/translate.py', line 68 in get_locale_from_request
  accept_lang_matches = request.accept_language.best_matches()
AttributeError: 'AcceptLanguage' object has no attribute 'best_matches'

http://docs.webob.org/en/latest/news.html

Looks like this is what caused it:

"Accept.best_matches() is gone; use list(request.accept) or request.accept.best_match(..) instead (applies to all Accept-* headers) or similar with request.accept_language."