I started a similar thread in general@incubator <https://lists.apache.org/list.html?gene...@incubator.apache.org>, suggesting that we could use the newish ".asf.yaml" <https://cwiki.apache.org/confluence/display/INFRA/git+-+.asf.yaml+features> as a place to manage the list of "triagers".
Personally, given the creativity of spammers and the rare but existing flame wars in open source, I'm a bit worried of what could happen if we open triage to all. Anyone with an API key could close / reopen all issues. More anecdotally, random people with good intentions could misuse labels (I'll make this issue a "top-priority", or label to be added in the next release, move things around in the project view, delete wikis, or create new labels that create more harm than good). Also, given the fact that committers/PMC don't have repo admin rights, we don't have direct access to protection mechanisms that GitHub offers, like ghosting or banning users from repos. Max On 2020/08/20 21:22:21, Dave Fisher <w...@apache.org> wrote: > > > > On Aug 20, 2020, at 12:48 PM, Jacques Le Roux < jacques.le.r...@les7arts.com> wrote: > > > > Le 20/08/2020 à 15:08, Bertrand Delacretaz a écrit : > >> On Thu, Aug 20, 2020 at 3:01 PM Harbs <harbs.li...@gmail.com> wrote: > >>> I also don’t see any harm in making triage rights open to all.... > >> I suspect creative minds might find a way to spam us with this if it's > >> "open to all" ? > > > > From my experience it always ends like this... > > > > > >> > >> For our wikis I think we generally give write access to anyone who > >> *asks on our mailing lists* and has some connection to our projects. > >> If that's what people mean by "open to all" I'm fine. > > > > Agreed > > IMO - It’s important for the triage activity to generate some type of notification email so that it is possible for the PMC to triage the triage. > > Regards, > Dave > > > > > Jacques > > > >> > >> I suppose the .asf.yaml mechanism could be extended to list GitHub > >> users who have this role? > >> > >> -Bertrand > >> > >> --------------------------------------------------------------------- > >> To unsubscribe, e-mail: dev-unsubscr...@community.apache.org > >> For additional commands, e-mail: dev-h...@community.apache.org > >> > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: dev-unsubscr...@community.apache.org > > For additional commands, e-mail: dev-h...@community.apache.org > > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@community.apache.org > For additional commands, e-mail: dev-h...@community.apache.org > >
