El mié., 17 jun. 2020 11:27, Guilhem Moulin <[email protected]>
escribió:

> Hi Daniel,
>
> On Wed, 17 Jun 2020 at 09:00:56 -0300, Daniel Armando Rodriguez wrote:
> > While the origin of the question lies in the documentation published on
> the
> > extensions site, surely will be useful for more things, could a generic
> > account for spanish documentation team be created to not depend on a
> > particular user?
>
> I strongly advice *against* using shared accounts as a way to emulate
> groups.  Accounts propagate from the Single Sign-On system to the
> Service Providers, so that will lead to shared Wiki, gerrit, Redmine,
> etc. accounts.
>
> > The argument is that if a user uploads a document and later leaves the
> team,
> > it is he who is listed as the document maintainer and not the team and
> > therefore only he could update and so on...
>
> Shared accounts are a nightmare for those who would need to jump in in
> case of account compromise or vandalism.  We would need to rotate the
> shared credential upon team membership changes, thereby causing burden
> to remaining members.  Also which address should one put as primary
> contact?  A mailing list?  Password reset tokens would end up in its
> archives :-/  IMHO the only valid use case for shared credentials is
> ephemeral shared secrets, such as a random jitsi room name or a random
> pad name that would automatically be wiped/removed after some time.
>
> Groups of users are a better fit for that workflow, and the only one
> that works properly with the rest of our tooling.  Not sure the site
> allows granting write access to a group though.  cloph?
>

If so, that will do the job.

>

-- 
To unsubscribe e-mail to: [email protected]
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.libreoffice.org/global/website/
Privacy Policy: https://www.documentfoundation.org/privacy

Reply via email to