El mié., 17 jun. 2020 11:27, Guilhem Moulin <[email protected]> escribió:
> Hi Daniel, > > On Wed, 17 Jun 2020 at 09:00:56 -0300, Daniel Armando Rodriguez wrote: > > While the origin of the question lies in the documentation published on > the > > extensions site, surely will be useful for more things, could a generic > > account for spanish documentation team be created to not depend on a > > particular user? > > I strongly advice *against* using shared accounts as a way to emulate > groups. Accounts propagate from the Single Sign-On system to the > Service Providers, so that will lead to shared Wiki, gerrit, Redmine, > etc. accounts. > > > The argument is that if a user uploads a document and later leaves the > team, > > it is he who is listed as the document maintainer and not the team and > > therefore only he could update and so on... > > Shared accounts are a nightmare for those who would need to jump in in > case of account compromise or vandalism. We would need to rotate the > shared credential upon team membership changes, thereby causing burden > to remaining members. Also which address should one put as primary > contact? A mailing list? Password reset tokens would end up in its > archives :-/ IMHO the only valid use case for shared credentials is > ephemeral shared secrets, such as a random jitsi room name or a random > pad name that would automatically be wiped/removed after some time. > > Groups of users are a better fit for that workflow, and the only one > that works properly with the rest of our tooling. Not sure the site > allows granting write access to a group though. cloph? > If so, that will do the job. > -- To unsubscribe e-mail to: [email protected] Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/ Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette List archive: https://listarchives.libreoffice.org/global/website/ Privacy Policy: https://www.documentfoundation.org/privacy
