(If you are not on the mozilla-b2g owners team, you can stop reading now
:-))
The mozilla-b2g Github organisation currently has 38 members of the
owners team:
https://github.com/orgs/mozilla-b2g/teams/owners
Recently the main mozilla organisation culled their list of owners for
security reasons.
I believe we should do the same for mozilla-b2g, not just for security,
but also to reduce the number of people who can (and do) accidentally
push to gaia when the sheriffs have 'closed' the tree by revoking PUSH
permissions to !owners (it is not possible to revoke for owners & we
have no other way of closing the tree, due to B2G's use of a third party
service for which we cannot create custom git hooks).
Unless you regularly have a need to create/move repositories (those in
releng responsible for B2G branching) or some other owner-only ability
(eg closing the trees, so sheriffs), being a member of the 'Chefs' group
should be sufficient.
If people fall into both the "need owner permissions" and "regularly
commit to gaia" bucket, then they will need to check the mailing lists
and/or https://github.com/mozilla-b2g/gaia/settings/collaboration to see
if access has been revoked to the Chefs/Cooks groups before pushing - or
else use two github accounts.
Is there someone with more context as to who needs permissions who is
able and willing to own this for the sheriffs (so we don't get stung
each time the tree is closed and people push anyway)?
Many thanks,
Ed
_______________________________________________
dev-b2g mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-b2g
