Re: [libreoffice-website] Generic user for extensions site
Ok. Thanks for the info guys. Regards El vie., 19 jun. 2020 12:27, Christian Lohmaier escribió: > Hi Daniel, Guilhem, *, > > On Wed, Jun 17, 2020 at 4:26 PM Guilhem Moulin > wrote: > > […] > > Groups of users are a better fit for that workflow, and the only one > > that works properly with the rest of our tooling. Not sure the site > > allows granting write access to a group though. cloph? > > Silverstripe as a platform knows of groups and roles/permission > inheritance, however the extensionsite backend currently has no > provisions for working with groups. (well, exception is > moderators/admins that can view/modify all extensions). > > ciao > Christian > > -- > To unsubscribe e-mail to: website+unsubscr...@global.libreoffice.org > Problems? > https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/ > Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette > List archive: https://listarchives.libreoffice.org/global/website/ > Privacy Policy: https://www.documentfoundation.org/privacy > -- To unsubscribe e-mail to: website+unsubscr...@global.libreoffice.org Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/ Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette List archive: https://listarchives.libreoffice.org/global/website/ Privacy Policy: https://www.documentfoundation.org/privacy
Re: [libreoffice-website] Generic user for extensions site
El mié., 17 jun. 2020 11:27, Guilhem Moulin escribió: > Hi Daniel, > > On Wed, 17 Jun 2020 at 09:00:56 -0300, Daniel Armando Rodriguez wrote: > > While the origin of the question lies in the documentation published on > the > > extensions site, surely will be useful for more things, could a generic > > account for spanish documentation team be created to not depend on a > > particular user? > > I strongly advice *against* using shared accounts as a way to emulate > groups. Accounts propagate from the Single Sign-On system to the > Service Providers, so that will lead to shared Wiki, gerrit, Redmine, > etc. accounts. > > > The argument is that if a user uploads a document and later leaves the > team, > > it is he who is listed as the document maintainer and not the team and > > therefore only he could update and so on... > > Shared accounts are a nightmare for those who would need to jump in in > case of account compromise or vandalism. We would need to rotate the > shared credential upon team membership changes, thereby causing burden > to remaining members. Also which address should one put as primary > contact? A mailing list? Password reset tokens would end up in its > archives :-/ IMHO the only valid use case for shared credentials is > ephemeral shared secrets, such as a random jitsi room name or a random > pad name that would automatically be wiped/removed after some time. > > Groups of users are a better fit for that workflow, and the only one > that works properly with the rest of our tooling. Not sure the site > allows granting write access to a group though. cloph? > If so, that will do the job. > -- To unsubscribe e-mail to: website+unsubscr...@global.libreoffice.org Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/ Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette List archive: https://listarchives.libreoffice.org/global/website/ Privacy Policy: https://www.documentfoundation.org/privacy
Re: [libreoffice-website] Generic user for extensions site
Hi Daniel, On Wed, 17 Jun 2020 at 09:00:56 -0300, Daniel Armando Rodriguez wrote: > While the origin of the question lies in the documentation published on the > extensions site, surely will be useful for more things, could a generic > account for spanish documentation team be created to not depend on a > particular user? I strongly advice *against* using shared accounts as a way to emulate groups. Accounts propagate from the Single Sign-On system to the Service Providers, so that will lead to shared Wiki, gerrit, Redmine, etc. accounts. > The argument is that if a user uploads a document and later leaves the team, > it is he who is listed as the document maintainer and not the team and > therefore only he could update and so on... Shared accounts are a nightmare for those who would need to jump in in case of account compromise or vandalism. We would need to rotate the shared credential upon team membership changes, thereby causing burden to remaining members. Also which address should one put as primary contact? A mailing list? Password reset tokens would end up in its archives :-/ IMHO the only valid use case for shared credentials is ephemeral shared secrets, such as a random jitsi room name or a random pad name that would automatically be wiped/removed after some time. Groups of users are a better fit for that workflow, and the only one that works properly with the rest of our tooling. Not sure the site allows granting write access to a group though. cloph? Cheers, -- Guilhem. -- To unsubscribe e-mail to: website+unsubscr...@global.libreoffice.org Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/ Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette List archive: https://listarchives.libreoffice.org/global/website/ Privacy Policy: https://www.documentfoundation.org/privacy
[libreoffice-website] Generic user for extensions site
Hi, While the origin of the question lies in the documentation published on the extensions site, surely will be useful for more things, could a generic account for spanish documentation team be created to not depend on a particular user? The argument is that if a user uploads a document and later leaves the team, it is he who is listed as the document maintainer and not the team and therefore only he could update and so on... -- Daniel Armando Rodriguez -- To unsubscribe e-mail to: website+unsubscr...@global.libreoffice.org Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/ Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette List archive: https://listarchives.libreoffice.org/global/website/ Privacy Policy: https://www.documentfoundation.org/privacy
