sebb wrote on 5/19/18 8:30 AM: > On 19 May 2018 at 13:13, Sam Ruby <[email protected]> wrote: >> On Sat, May 19, 2018 at 6:19 AM, sebb <[email protected]> wrote: >>> https://issues.apache.org/jira/browse/WHIMSY-194 >>> >>> Is it OK to implement this? >> >> No objections here. >> >>> i.e. any objections to allowing a PMC member to auto-sub to the >>> corresponding private@ list? >>> >>> I assume membership of the PMC should be determined from CI rather than >>> LDAP. >> >> I have a preference for this being done via LDAP. Rationale: any >> committer can directly update CI. This would provide a path by which >> a committer could gain access to private@; albeit a path that would >> leave a very visible audit trail.
Agreed. While we may treat committee-info.txt as canonical from a legal, organizational perspective, this kind of change should use LDAP. The security risk is more important here. > > OK, fair point. > >>> S. >> >> - Sam Ruby -- - Shane Director & Member The Apache Software Foundation
