Page MenuHomePhabricator

discovery-stats user does not have access to mysql config and published datasets
Closed, ResolvedPublic

Description

The mysql config for discovery-stats and the published datasets (/srv/published-datasets/discovery) are all group=wikidev. The discovery-stats user is defined as a member of that group in puppet code, but it gets overwritten by Admin::Groupmembers which applies permissions defined in [[ https://github.com/wikimedia/puppet/blob/production/modules/admin/data/data.yaml | data.yaml ]].

Event Timeline

Change 370530 had a related patch set uploaded (by Gehel; owner: Gehel):
[operations/puppet@production] discovery-stats user should be a member of wikidev group

https://gerrit.wikimedia.org/r/370530

Change 370530 merged by Gehel:
[operations/puppet@production] discovery-stats user should be a member of wikidev group

https://gerrit.wikimedia.org/r/370530

@mpopov, could you confirm that things now work as expected? I've seen https://gerrit.wikimedia.org/r/#/c/371769 which is somewhat related, but is linked to another task.

mpopov closed this task as Resolved.EditedAug 14 2017, 5:35 PM
mpopov assigned this task to Gehel.

Yep, it looks like the patch worked! :D Thank you!!!