[Pkg-dns-devel] Alioth

[Bernhard Schmidt]

On 02.01.2018 22:57, Daniel Kahn Gillmor wrote:
> On Tue 2018-01-02 22:44:27 +0100, Bernhard Schmidt wrote:
>> On 02.01.2018 22:42, ondrej at sury.org wrote:
>>> Personally, I would prefer a separate group where we add whole
>>> collab-maint group with Developer access, but we keep the Master/Owner
>>> access level to smaller group. That would allow us to control things
>>> like force pushes to people who regularly take care about the packages.
>>
>> That's actually a nice idea!
> 
> hm, this worries me a bit, because it means that if Alice is deciding
> whether to add Bob else to collab-maint or not, she's now effectively
> granting them write access to pkg-dns repositories without knowing about
> it.  That doesn't seem like a great outcome, because it changes the
> semantics that people are expecting.

As far as I understood:

The _user_ group Debian only contains DDs, and contains all DDs.
Therefor adding this Group with the "Developer" role to the pkg-dns-team
project group only adds DDs, nothing more.

The _project_ group Debian (successor of collab-maint) allows "Master"
access for all DDs to all projects contained within. It is not possible
for mere mortals to add guests to that level (although I don't exactly
know how that works, since "Master" should have the permission to add
new members), they can only be added to specific projects within that group.

Bernhard