PyPI role maintenance - Owners vs. Maintainers

Question

Am I reading correctly in assuming that only 'Owners' can push new versions, or can 'Maintainers' do so as well?

The Maintainer's role is listed as "Can submit and update info for a particular package name.". Specifically what info can a maintainer edit?

Answer 1

In the current Warehouse engine backing PyPI, a Maintainer only has the upload permission.

Anything else requires the user to be an owner.

Warehouse is a Pyramid project, so you can read up on how access control is managed in the Pyramid Security documentation; views are protected by specific permissions (or manual request.has_permission() checks, and most project views require the manage:project permission, which is only given to project owners.