You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@lucy.apache.org by Marvin Humphrey <ma...@rectangular.com> on 2011/12/02 01:28:12 UTC
[lucy-dev] RFC: Grant all ASF Committers Lucy SVN karma
Greets,
I'd like to propose that the Lucy podling consider nuking our Subversion authz
entry, allowing anyone who is a Committer at the ASF to commit to the Lucy
corner of the ASF repository.
There are two primary rationales for making this change. First, we make life
easier for Infra -- especially if other projects follow our lead. Second, we
lower the barrier to entry for other ASF committers to contribute to Lucy.
Of course we would still have a soft rule in place that significant changes
must be run through lucy-dev first, but we would trust other committers to
follow this rule rather than enforce it through access control as we do today.
Security is not a problem. For this to work, we have to monitor our commits
list closely -- but any project that doesn't monitor its commits list closely
doesn't deserve to live at the ASF in the first place. The bare minimum
effort is just to watch the sender address for looking for unfamiliar apache
ids. Anything that we catch and don't like, we can just revert.
Provenance tracking is not a problem either -- anybody who has ASF commit
privileges has an iCLA on file.
Various people throughout the ASF are on record supporting the liberalization
of repository permissions, including Board member Roy Fielding and Lucy
Mentors Joe Schaefer and Chris Mattmann. Roy recently wrote to
general@incubator urging that the all Incubator committers be given commit
access to all podlings:
http://s.apache.org/0HY
I *suggest* that incubator change the procedure such that all committers
(or at least all committers within a single LDAP group) have access to all
incubator areas and that new people simply be requested to only commit
within areas for which they have been given permission by the podling
developers.
Joe and I believe that we should go one step further and grant access to the
entire ASF committer community. Neither Joe, nor I, nor Gavin MacDonald
foresee serious problems. There may be Incubator-specific bookkeeping issues
that arise, as discussed in the followups to Roy's post, but those shouldn't
block us on principle.
>From what Joe tells me, other ASF communities have discussed making such a
change, but we would be the first to actually go through with it.
If we have general consensus, I will call a VOTE proposing that we liberalize
our authz to the maximum extent possible within the practical constraints of
the Incubator.
Marvin Humphrey
Re: [lucy-dev] RFC: Grant all ASF Committers Lucy SVN karma
Posted by Chris Hostetter <ho...@fucit.org>.
: IMO, the perfect place for this is the new CONTRIBUTING document which I
: committed yesterday, which sits next to README at the top level of our source
: tree -- it's better to have this rule communicated by something which travels
...
: If you propose to make non-trivial changes to Lucy, especially changes
: to the public API, send a note to the Lucy developer's list describing
: your plans:
...
: I think that second paragraph suffices. We don't have to spell out negative
: consequences or draft finely graded rules.
Agreed. I wasn't thinking about consequences or rules, so much as just
advertising.
Something like adding: "All @apache committers have Lucy SVN karma by
default with the understanding that they will follow the same guidelines
as the core Lucy developers" to CONTRIBUTING.txt
-Hoss
Re: [lucy-dev] RFC: Grant all ASF Committers Lucy SVN karma
Posted by Marvin Humphrey <ma...@rectangular.com>.
On Fri, Dec 02, 2011 at 12:03:07PM -0800, Chris Hostetter wrote:
>
> : I'd like to propose that the Lucy podling consider nuking our Subversion authz
> : entry, allowing anyone who is a Committer at the ASF to commit to the Lucy
> : corner of the ASF repository.
> ....
> : Of course we would still have a soft rule in place that significant changes
> : must be run through lucy-dev first, but we would trust other committers to
> : follow this rule rather than enforce it through access control as we do today.
>
> My suggestion would be that since this isn't something many apache
> projects do (yet) this "soft rule" should probably be written down in the
> form of loose guidelines somewhere ... wiki, wwwsite, COMMITTERS.txt,
> whatever.
IMO, the perfect place for this is the new CONTRIBUTING document which I
committed yesterday, which sits next to README at the top level of our source
tree -- it's better to have this rule communicated by something which travels
with the code rather than hope that people find it out on a wiki somewhere.
Here's how CONTRIBUTING starts off:
===========================
Contributing to Apache Lucy
==========================
MAKE A PLAN:
If you're looking for something to work on, see the STATUS file for a
list of development priorities that the Lucy community has already built
consensus around.
If you propose to make non-trivial changes to Lucy, especially changes
to the public API, send a note to the Lucy developer's list describing
your plans:
http://incubator.apache.org/lucy/mailing_lists.html
GET THE CODE:
...
I think that second paragraph suffices. We don't have to spell out negative
consequences or draft finely graded rules.
Marvin Humphrey
Re: [lucy-dev] RFC: Grant all ASF Committers Lucy SVN karma
Posted by Chris Hostetter <ho...@fucit.org>.
: I'd like to propose that the Lucy podling consider nuking our Subversion authz
: entry, allowing anyone who is a Committer at the ASF to commit to the Lucy
: corner of the ASF repository.
....
: Of course we would still have a soft rule in place that significant changes
: must be run through lucy-dev first, but we would trust other committers to
: follow this rule rather than enforce it through access control as we do today.
My suggestion would be that since this isn't something many apache
projects do (yet) this "soft rule" should probably be written down in the
form of loose guidelines somewhere ... wiki, wwwsite, COMMITTERS.txt,
whatever.
-Hoss
Re: [lucy-dev] RFC: Grant all ASF Committers Lucy SVN karma
Posted by "Mattmann, Chris A (388J)" <ch...@jpl.nasa.gov>.
+1, let's do it.
Cheers,
Chris
P.S. Super +1! *grin*
On Dec 1, 2011, at 4:36 PM, Joe Schaefer wrote:
> Outstanding Marvin!
>
>
>
>
>> ________________________________
>> From: Marvin Humphrey <ma...@rectangular.com>
>> To: lucy-dev@incubator.apache.org
>> Sent: Thursday, December 1, 2011 7:28 PM
>> Subject: [lucy-dev] RFC: Grant all ASF Committers Lucy SVN karma
>>
>> Greets,
>>
>> I'd like to propose that the Lucy podling consider nuking our Subversion authz
>> entry, allowing anyone who is a Committer at the ASF to commit to the Lucy
>> corner of the ASF repository.
>>
>> There are two primary rationales for making this change. First, we make life
>> easier for Infra -- especially if other projects follow our lead. Second, we
>> lower the barrier to entry for other ASF committers to contribute to Lucy.
>>
>> Of course we would still have a soft rule in place that significant changes
>> must be run through lucy-dev first, but we would trust other committers to
>> follow this rule rather than enforce it through access control as we do today.
>>
>> Security is not a problem. For this to work, we have to monitor our commits
>> list closely -- but any project that doesn't monitor its commits list closely
>> doesn't deserve to live at the ASF in the first place. The bare minimum
>> effort is just to watch the sender address for looking for unfamiliar apache
>> ids. Anything that we catch and don't like, we can just revert.
>>
>> Provenance tracking is not a problem either -- anybody who has ASF commit
>> privileges has an iCLA on file.
>>
>> Various people throughout the ASF are on record supporting the liberalization
>> of repository permissions, including Board member Roy Fielding and Lucy
>> Mentors Joe Schaefer and Chris Mattmann. Roy recently wrote to
>> general@incubator urging that the all Incubator committers be given commit
>> access to all podlings:
>>
>> http://s.apache.org/0HY
>>
>> I *suggest* that incubator change the procedure such that all committers
>> (or at least all committers within a single LDAP group) have access to all
>> incubator areas and that new people simply be requested to only commit
>> within areas for which they have been given permission by the podling
>> developers.
>>
>> Joe and I believe that we should go one step further and grant access to the
>> entire ASF committer community. Neither Joe, nor I, nor Gavin MacDonald
>> foresee serious problems. There may be Incubator-specific bookkeeping issues
>> that arise, as discussed in the followups to Roy's post, but those shouldn't
>> block us on principle.
>>
>> From what Joe tells me, other ASF communities have discussed making such a
>> change, but we would be the first to actually go through with it.
>>
>> If we have general consensus, I will call a VOTE proposing that we liberalize
>> our authz to the maximum extent possible within the practical constraints of
>> the Incubator.
>>
>> Marvin Humphrey
>>
>>
>>
>>
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Chris Mattmann, Ph.D.
Senior Computer Scientist
NASA Jet Propulsion Laboratory Pasadena, CA 91109 USA
Office: 171-266B, Mailstop: 171-246
Email: chris.a.mattmann@nasa.gov
WWW: http://sunset.usc.edu/~mattmann/
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Adjunct Assistant Professor, Computer Science Department
University of Southern California, Los Angeles, CA 90089 USA
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Re: [lucy-dev] RFC: Grant all ASF Committers Lucy SVN karma
Posted by Joe Schaefer <jo...@yahoo.com>.
Outstanding Marvin!
>________________________________
> From: Marvin Humphrey <ma...@rectangular.com>
>To: lucy-dev@incubator.apache.org
>Sent: Thursday, December 1, 2011 7:28 PM
>Subject: [lucy-dev] RFC: Grant all ASF Committers Lucy SVN karma
>
>Greets,
>
>I'd like to propose that the Lucy podling consider nuking our Subversion authz
>entry, allowing anyone who is a Committer at the ASF to commit to the Lucy
>corner of the ASF repository.
>
>There are two primary rationales for making this change. First, we make life
>easier for Infra -- especially if other projects follow our lead. Second, we
>lower the barrier to entry for other ASF committers to contribute to Lucy.
>
>Of course we would still have a soft rule in place that significant changes
>must be run through lucy-dev first, but we would trust other committers to
>follow this rule rather than enforce it through access control as we do today.
>
>Security is not a problem. For this to work, we have to monitor our commits
>list closely -- but any project that doesn't monitor its commits list closely
>doesn't deserve to live at the ASF in the first place. The bare minimum
>effort is just to watch the sender address for looking for unfamiliar apache
>ids. Anything that we catch and don't like, we can just revert.
>
>Provenance tracking is not a problem either -- anybody who has ASF commit
>privileges has an iCLA on file.
>
>Various people throughout the ASF are on record supporting the liberalization
>of repository permissions, including Board member Roy Fielding and Lucy
>Mentors Joe Schaefer and Chris Mattmann. Roy recently wrote to
>general@incubator urging that the all Incubator committers be given commit
>access to all podlings:
>
> http://s.apache.org/0HY
>
> I *suggest* that incubator change the procedure such that all committers
> (or at least all committers within a single LDAP group) have access to all
> incubator areas and that new people simply be requested to only commit
> within areas for which they have been given permission by the podling
> developers.
>
>Joe and I believe that we should go one step further and grant access to the
>entire ASF committer community. Neither Joe, nor I, nor Gavin MacDonald
>foresee serious problems. There may be Incubator-specific bookkeeping issues
>that arise, as discussed in the followups to Roy's post, but those shouldn't
>block us on principle.
>
>From what Joe tells me, other ASF communities have discussed making such a
>change, but we would be the first to actually go through with it.
>
>If we have general consensus, I will call a VOTE proposing that we liberalize
>our authz to the maximum extent possible within the practical constraints of
>the Incubator.
>
>Marvin Humphrey
>
>
>
>
Re: [lucy-dev] RFC: Grant all ASF Committers Lucy SVN karma
Posted by "David E. Wheeler" <da...@justatheory.com>.
On Dec 1, 2011, at 4:28 PM, Marvin Humphrey wrote:
> If we have general consensus, I will call a VOTE proposing that we liberalize
> our authz to the maximum extent possible within the practical constraints of
> the Incubator.
+1
David
Re: [lucy-dev] RFC: Grant all ASF Committers Lucy SVN karma
Posted by Peter Karman <pe...@peknet.com>.
Marvin Humphrey wrote on 12/1/11 6:28 PM:
> If we have general consensus, I will call a VOTE proposing that we liberalize
> our authz to the maximum extent possible within the practical constraints of
> the Incubator.
+1
--
Peter Karman . http://peknet.com/ . peter@peknet.com