Revoke repository write access for inactive accounts #55

New Issue

Brecht Van Lommel · 2023-03-13T11:26:24+01:00

Brecht Van Lommel commented

2023-03-13 11:26:24 +01:00

For security reasons, inactive developer accounts should no longer have write access to repositories as those accounts are more likely to get compromised.

There are also many summer of code accounts where the intent was never to give write access to main. Going forward these students only need to work in a forked repository, and can be given commit access when their code lands and they are available to maintain it going forward.

Proposed policy: remove accounts inactive for 2 years. Anyone that previously had commit access can ask for it back without having to go through approval of Blender admins.

Create "All-time Developers" and other teams to move inactive developers to.
Write a script to get the list of inactive developers (add to tools/)
Move inactive developers to teams and make announcement

For security reasons, inactive developer accounts should no longer have write access to repositories as those accounts are more likely to get compromised. There are also many summer of code accounts where the intent was never to give write access to main. Going forward these students only need to work in a forked repository, and can be given commit access when their code lands and they are available to maintain it going forward. Proposed policy: remove accounts inactive for 2 years. Anyone that previously had commit access can ask for it back without having to go through approval of Blender admins. - [x] Create "All-time Developers" and other teams to move inactive developers to. - [x] Write a script to get the list of inactive developers (add to tools/) - [x] Move inactive developers to teams and make announcement

Dalai Felinto commented

2023-03-14 10:33:42 +01:00

We could have a team that has no addition permission and move those developers there.

Sugestion: "All-time Developers".

We could have a team that has no addition permission and move those developers there. Sugestion: "All-time Developers".

Dalai Felinto self-assigned this 2023-03-14 10:38:06 +01:00

Dalai Felinto referenced this issue from a commit

2023-04-13 17:00:49 +02:00

Tools: util to get inactive member of teams from gitea

Dalai Felinto referenced this issue from a commit

2023-04-13 17:02:30 +02:00

Tools: util to get inactive member of teams from gitea