NDA holders is quite a different set of permits. It is mostly geared towards research collaborators access to data so actually, there are quite a bit of external parties that have access to data that should not have access to issues of legal nature (like data retained due to a lawsuit). Makes sense?

The argumentation makes sense I guess, I'm just not sure if it's technically possible what you have in mind. :)

similar to the one we use for hardware requests restricted just to ops/analytics and legal.

Do you refer to S4 or S6 here? We have #acl*operations-team and #acl*procurement-review projects for access control in place, but I'm not aware of ACL projects for Legal or Analytics. Yet. And who should be members of these projects and "decide" on and maintain membership in them.

Also, please see the link in T174675#3577182 for required information (name of the Spaces, who can access the Space, etc.)

I guess I was thinking of s4 as it is the only other space i see when I go to: https://phabricator.wikimedia.org/spaces/, I am not sure what ACL here refers to, I imagine is this: https://phabricator.wikimedia.org/project/profile/29/, thus the new space should include ops engineers and analytics engineers. Seems like we would need to create a new "acl-analytics group for that" also some members of legal team like @ZhouZ

Ideally we'd designate one or two people who will decide on the membership of the acl group. Then we delegate control to them so that phabricator admins don't have to intervene every time there is a change to the list of people who can access the space.

So if I get it right:

• Create some #acl* project for Analytics folks (only used for access control and not for any tasks)
• Add one or two Analytics folks (who?) to that #acl* project and let them add more people if needed
• Set up a Space (TODO: please provide a name and description) that can accessed by members of both #acl*operations-team and that #acl* analytics project only

Thanks also Legal might also want to create a separate Legal space in addition to the one with Analytics folks

This is blocked on

• Add one or two Analytics folks (who?)

Someone please answer.

In T174675#3609362, @ZhouZ wrote:

Thanks also Legal might also want to create a separate Legal space in addition to the one with Analytics folks

Please file a separate task for that Space if that Space is wanted. Thanks.

The space should include the following members: members of analytics team @mforns @Ottomata @Milimetric @JAllemandou @elukey @fdans plus @Nuria plus CTO: @VColeman plus all members of ops team.

I am happy to administer it and grant access to whoever proceeds in legal, probably @APalmer_WMF

We could use this one @Aklapper for upcoming work with NSA lawsuit, could we get it done ? (cc @Ottomata )

Also ping @ggellerman

@Nuria
Do you want me to be added to the space or to make sure the ACL gets set up? Thanks!

Both actually, i think we could use this space to organize many upcoming tasks

But I tthink @Aklapper will get to it now that ticket is not in "blocked" ( i think I should have changed that earlier and I forgot)

As per T174675#3577182: Could someone please provide a description of that Space, and a name for that Space?
Also, I assume that the existing public WMF-Legal project would be used in addition for tasks, as Spaces have no workboard themselves? (Space members can see those tasks in the Space on that WMF-Legal workboard while non-Space members could not.) Or is a separate project wanted? If so, what's the name of that project (could be the same as the name of the Space)?

@Nuria: Here is a start to respond to request from @Aklapper for a description and a name for the space. Please review/edit or approve. Thanks!

Description: Space used by the Analytics team for reviewing incoming requests from WMF-Legal that need to remain private.

Name: Analytics-Legal

One small amend:

Description: Space used by the Analytics and Techops team for reviewing incoming requests from WMF-Legal that need to remain private.

Name: Analytics-Legal

Thanks, @Nuria!

@Aklapper do you have what you need to create this space?

In T174675#3834564, @ggellerman wrote:

@Aklapper do you have what you need to create this space?

In T174675#3830789, @Aklapper wrote:

Also, I assume that the existing public WMF-Legal project would be used in addition for tasks, as Spaces have no workboard themselves? (Space members can see those tasks in the Space on that WMF-Legal workboard while non-Space members could not.) Or is a separate project wanted? If so, what's the name of that project (could be the same as the name of the Space)?

I just had a loo at the WMF-Legal board. I think that a separate board would make sense. The proj name could also be Analytics-Legal.

I wonder if this description shouldn't explicitly call out analytics and ops; this space is more a general space for private WMFl-Legal related (tech?) tasks.

I do not think so, main usage will be managing tasks for legal holds which is of concern of analytics and ops, I do not think space should be super generic

Why though? Tilman is not on the 'analytics' team, but will need access. It isn't inconceivable that we might have to loop others teams (community folks?) for this or some other future lawsuit. Might as well keep this for generic private legal tasks.

• Regarding the project and its workboard:
  • Public project Data-Engineering-Legal created: https://phabricator.wikimedia.org/project/view/3153/
  • Anyone can visit and join this public project as a member, to watch the project to receive updates on public tasks.

Next on my list: Creating a private Space.

Thanks, @Aklapper !