Page MenuHomePhabricator

My account was removed from the Wikimedia Github group
Open, MediumPublic

Description

On 2018-12-06 13:54:42 UTC my account https://github.com/JanZerebecki was removed from the group https://github.com/wikimedia without explanation.

Sorry for being so late to notice, I was on holiday and didn't read Github email.

Who did that? An admin please check the audit log and paste the relevant part.
Is this a security incident?

@Reedy I don't have a list of admins of that group handy, so I'm just guessing that you might be or at least know?

Event Timeline

Hi Jan! I removed you (and a few other former employees, IIRC) when looking over group membership in github; We are trying to consolidate onboarding/offboarding procedures, and keep groups on different services in sync. You being in that group seemed like an oversight. As far as I'm aware, membership in the wikimedia organization on github is intended to reflect current staff, with the exception off external people actively involved in ongoing projects. The cleanup is still incomplete, I just took care of the people from the wikidata team.

Do you think you should still be a member of the wikimedia "organization" on github? What are you using this membership for?

Do you think you should still be a member of the wikimedia "organization" on github? What are you using this membership for?

FWIW, lots of people are members basically because its an easy way to make your contributions show up your github profile page, without having to watch/star every single github repo.

@Bawolff my assumption was that project membership was intended to reflect current staff. Unfortunately, there seems to be no documentation for this. Perhaps this should be reviews as part of the upcoming revamp of the +2 policy for gerrit.

I personally have no strong feelings about this, as long as there is a clear policy which is documented in a way that allows people on github to understand what assumptions they can make about members of the wikimedia project.

I personally have no strong feelings about this, as long as there is a clear policy which is documented in a way that allows people on github to understand what assumptions they can make about members of the wikimedia project.

+1

Anyone having an idea where to discuss such a policy? engineering@? Asking as I'm afraid that this ticket could get stuck (though the questions in the last line of T212911#4854118 also sound valid to me).

@Aklapper As far as I understand, the ultimate authority on who should have access to which of our repos is the CTO. Relevant angles on the issue can probably be provided by community engagement, legal, and HR. No idea what the best venue for discussion is, sorry...

@Aklapper As far as I understand, the ultimate authority on who should have access to which of our repos is the CTO. Relevant angles on the issue can probably be provided by community engagement, legal, and HR. No idea what the best venue for discussion is, sorry...

Personally, I think it should be more of a community decision (Just because I think that doesn't make it so).

Anyone having an idea where to discuss such a policy? engineering@? Asking as I'm afraid that this ticket could get stuck (though the questions in the last line of T212911#4854118 also sound valid to me).

I'd say wikitech-l. What's even the point of engineering@ ? Seems mostly like a list with less readership so people can claim to have been public about something without having to actually deal with the public. If it was up to me that list would be shutdown.

chasemp triaged this task as Medium priority.Dec 9 2019, 4:33 PM