https://bugzilla.wikimedia.org/show_bug.cgi?id=45539
Ori Livneh <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |[email protected] --- Comment #10 from Ori Livneh <[email protected]> --- (In reply to comment #9) > My 2cents: > > shell : anyone with access to bastion and able to deploy code changes > ops : for roots :-] That's not bad, except for the names: 'shell' is opaque with respect to what users in the group can actually do, and 'ops' includes some people outside of operations (Tim, Roan, etc.). So I'd rename that to 'deployment'. (In reply to comment #8) > ... for which usecases on which machines which kind of access is needed ... (I'm painting with a broad brush.) deployment ---------- * Ability to change MediaWiki configurations. * Ability to deploy code changes to MediaWiki (core and extensions). * Ability (..but sometimes not authority) to read and modify data from the production databases that power Wikimedia wikis. root ---- All of the above, plus root shell everywhere. On Bugzilla, the need for this level of access comes up most often in relation to Wikimedia tools that are (a) not directly tied to MediaWiki and (b) have not been fully puppetized. Examples: Bugzilla, OTRS, Wikimedia blog. -- You are receiving this mail because: You are on the CC list for the bug. You are the assignee for the bug. You are watching all bug changes. _______________________________________________ Wikibugs-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
