Page MenuHomePhabricator

Security Issue Access Request for 2020 Stewards
Closed, ResolvedPublic

Description

To be provided acl*security_steward access (Phabricator Username):

To ensure removed from acl*security_steward access (without other authorization):

(One pending closure but you can proceed (updated mar 9))

Reasons For Request: 2020 edition of T217361: Security Issue Access Request for steward election, Stewards have access to #acl*security_steward to do stuff. New stewards should have access to the stuff just like oldbies, so this task is here for the annual events. Please validate if they have 2FA, and add them if they have it. I am not an phab admin so I can't check them.

The new stewards have been reminded to enable 2FA on Phab, FYI.

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald Transcript

Thanks @revi for creating this. It's on the agenda for our meeting on monday. Do you have an idea of when the (to be determined) for removals will be known?

We have a list of stewards who are stepping down (will update after saving this comment) but the final list (including those who failed our reconfirmation process) will be produced after March 7 (fastest date).

revi added a subscriber: Teles.

It might be a good idea to have redundancy? I listed them anyways knowing they have acl*security via acl*security_volunteer and acl*security_developer , respectively.

chasemp triaged this task as Medium priority.
chasemp moved this task from Incoming to In Progress on the Security-Team board.

I'll ask folks on our end about duplicate entry thinking (also worth asking @jbond if the automated logic can handle it?), and I'll wait till the final tally on march 7th to knock this out at once.

I'll ask folks on our end about duplicate entry thinking (also worth asking @jbond if the automated logic can handle it?), and I'll wait till the final tally on march 7th to knock this out at once.

chasemp changed the task status from Open to Stalled.Mar 2 2020, 5:19 PM
chasemp lowered the priority of this task from Medium to Lowest.
chasemp moved this task from In Progress to Waiting on the Security-Team board.

On my cal for the 9th.

I'll ask folks on our end about duplicate entry thinking (also worth asking @jbond if the automated logic can handle it?), and I'll wait till the final tally on march 7th to knock this out at once.

I'm not sure what the "duplicate entry thinking" refers to so hard to answer if the offboarding script can handle this. also note there is nothing automatic about the off boarding script it is ran manually when a member of SRE is actioning an offboarding task.

It refers to: should I be in both acl*security_volunteer and acl*security_steward, when I gained security access in both of those roles?

@chasemp Feel free to consider current list final for the time being. One stewards' confirmation is not closed but I think it's fine to go ahead (given current voting status).

@chasemp Feel free to consider current list final for the time being. One stewards' confirmation is not closed but I think it's fine to go ahead (given current voting status).

Thanks, will process soon

chasemp changed the task status from Stalled to Open.Mar 10 2020, 5:33 PM
chasemp moved this task from Waiting to In Progress on the Security-Team board.

@Krd if you would like to be included here please add MFA to your phab account. Thanks.

chasemp changed the task status from Open to Stalled.Mar 10 2020, 5:37 PM
chasemp moved this task from In Progress to Waiting on the Security-Team board.

@Krd if you would like to be included here please add MFA to your phab account. Thanks.

I'll leave this open for a week or so

@Krd if you would like to be included here please add MFA to your phab account. Thanks.

Done now.

sbassett updated the task description. (Show Details)
sbassett moved this task from Waiting to Our Part Is Done on the Security-Team board.
sbassett moved this task from Untriaged to Low priority on the Stewards-and-global-tools board.
sbassett moved this task from Backlog to Acknowledged on the SRE board.