[pkg-go] salsa: moving -guests to developer

Michael Stapelberg stapelberg at debian.org
Mon Apr 9 06:36:51 UTC 2018

Sounds good to me. I merged the PR and re-deployed the api server.

On Mon, Apr 9, 2018 at 5:57 AM, Alexandre Viau <aviau at debian.org> wrote:

> Hello,
> Currently, *-guest users in salsa.debian.org/go-team have "Master"
> permissions. I would like to change that to "developer".
> The only group-level permission difference between "Master" and
> "Developer" on gitlab is:
>  - "Create project in group" (this is originally why I gave them Master
> access)
> Project-level differences include:
>  - pushing to protected branches (they need this!)
>  - Edit project (and all project settings)
> Remarks:
>  - *-guests users should use dh-make-golang to create projects. They
> shouldn't require the "create project in group" permission.
>  - *-guest users should be able to push to protected branches
> We can allow developers to push to protected branches. This is
> configurable. When you protect a branch, you may allow "developers" to
> push to it.
> I reconfigured all of our protected branches to allow pushes from
> developers.
> I sent a merge request to go-team/ci to allow developers to push on
> protected branches:
>  - https://salsa.debian.org/go-team/ci/merge_requests/1
> This will have the following benefits:
>  - *-guest users will no longer be able to **force push** to important
> branches. This will protect our repositories from mass destruction by a
> guest, but they still can work on repositories as usual.
>  - *-guest users will now be forced to use dh-make-golang to create
> repositories. This is nice because some of them currently create
> repositories manually without the team-wide config, as they don't know
> our tools very well yet.
> When/if my merge request on go-team/ci is merged, I will change all
> guest users permissions to "developer".
> What do you think?
> cc-ing Michael because he will need to rebuild and deploy the server
> component of dh-make-golang if this goes trough.
> Cheers,
> --
> Alexandre Viau
> aviau at debian.org

Best regards,
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-go-maintainers/attachments/20180409/5bbdbde3/attachment.html>

More information about the Pkg-go-maintainers mailing list