You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@whimsical.apache.org by sebb <se...@gmail.com> on 2018/05/19 10:19:34 UTC
WHIMSY-194: allow PMC members to auto-sub to their private@ lists
https://issues.apache.org/jira/browse/WHIMSY-194
Is it OK to implement this?
i.e. any objections to allowing a PMC member to auto-sub to the
corresponding private@ list?
I assume membership of the PMC should be determined from CI rather than LDAP.
S.
Re: WHIMSY-194: allow PMC members to auto-sub to their private@ lists
Posted by Shane Curcuru <as...@shanecurcuru.org>.
sebb wrote on 5/19/18 8:30 AM:
> On 19 May 2018 at 13:13, Sam Ruby <ru...@intertwingly.net> wrote:
>> On Sat, May 19, 2018 at 6:19 AM, sebb <se...@gmail.com> wrote:
>>> https://issues.apache.org/jira/browse/WHIMSY-194
>>>
>>> Is it OK to implement this?
>>
>> No objections here.
>>
>>> i.e. any objections to allowing a PMC member to auto-sub to the
>>> corresponding private@ list?
>>>
>>> I assume membership of the PMC should be determined from CI rather than LDAP.
>>
>> I have a preference for this being done via LDAP. Rationale: any
>> committer can directly update CI. This would provide a path by which
>> a committer could gain access to private@; albeit a path that would
>> leave a very visible audit trail.
Agreed. While we may treat committee-info.txt as canonical from a
legal, organizational perspective, this kind of change should use LDAP.
The security risk is more important here.
>
> OK, fair point.
>
>>> S.
>>
>> - Sam Ruby
--
- Shane
Director & Member
The Apache Software Foundation
Re: WHIMSY-194: allow PMC members to auto-sub to their private@ lists
Posted by sebb <se...@gmail.com>.
On 19 May 2018 at 13:13, Sam Ruby <ru...@intertwingly.net> wrote:
> On Sat, May 19, 2018 at 6:19 AM, sebb <se...@gmail.com> wrote:
>> https://issues.apache.org/jira/browse/WHIMSY-194
>>
>> Is it OK to implement this?
>
> No objections here.
>
>> i.e. any objections to allowing a PMC member to auto-sub to the
>> corresponding private@ list?
>>
>> I assume membership of the PMC should be determined from CI rather than LDAP.
>
> I have a preference for this being done via LDAP. Rationale: any
> committer can directly update CI. This would provide a path by which
> a committer could gain access to private@; albeit a path that would
> leave a very visible audit trail.
OK, fair point.
>> S.
>
> - Sam Ruby
Re: WHIMSY-194: allow PMC members to auto-sub to their private@ lists
Posted by Sam Ruby <ru...@intertwingly.net>.
On Sat, May 19, 2018 at 6:19 AM, sebb <se...@gmail.com> wrote:
> https://issues.apache.org/jira/browse/WHIMSY-194
>
> Is it OK to implement this?
No objections here.
> i.e. any objections to allowing a PMC member to auto-sub to the
> corresponding private@ list?
>
> I assume membership of the PMC should be determined from CI rather than LDAP.
I have a preference for this being done via LDAP. Rationale: any
committer can directly update CI. This would provide a path by which
a committer could gain access to private@; albeit a path that would
leave a very visible audit trail.
> S.
- Sam Ruby