Page MenuHomePhabricator

Add Guergana Tzatchkova to the ldap/wmde and ldap/nda group
Closed, ResolvedPublic

Description

I’m employed at WMDE as a developer and would like to be added to the ldap/wmde group.
I would also need access to logstash, grafana, etc. so I also ask to be added to the ldap/nda group.
My Wikitech username is Guergana Tzatchkova, and my shell username is gutz.

I need to

  • sign NDA with WMF legal for LDAP access
  • get added to ldap/wmde
  • get added to ldap/nda

Event Timeline

ema triaged this task as Medium priority.Jun 24 2020, 9:13 AM

@KFrancis: Can you please confirm if there is an NDA on file for Guergana as I can't seem to find it in the spreadsheet.

@guergana.tzatchkova: Once the NDA is confirmed, the only other thing we will need is a confirmation from your manager.

Thank you.

@ssingh It doesn't look like we have an NDA on file for Guergana. No problem. I can process once when I have the following info:

-Full legal name
-Mailing address
-Email address
-Specifics about the type of sensitive data they will be accessing (see here for examples https://wikitech.wikimedia.org/wiki/LDAP/Groups)

Please email me the info at kfrancis@wikimedia.org asap. Thanks!

@guergana.tzatchkova: Once the NDA is confirmed, the only other thing we will need is a confirmation from your manager.

As an Engineering Manager at WMDE, I can confirm that @guergana.tzatchkova is working in the Wikidata team at WMDE as a software developer.

The records SRE have access to do not show yet an NDA agreement for guergana.tzatchkova. @guergana.tzatchkova Could you confirm this was sent and it is a delay on our side to process or if it hasn't been filed yet?

Should I send my personal data? Or will it be sent in by wmde?

This comment was removed by KFrancis.
This comment was removed by KFrancis.

One question, @guergana.tzatchkova you are only asking access to the wmde group, not the nda one, correct (no access to logstash, only the gerrit repos)? Unlike T257038, which requested both wmde AND nda access.

If thats's correct, there is not need for an nda as no special private acess will be granted, and only confirmation from your manager will be needed that you have a relationship with wmde.

One question, @guergana.tzatchkova you are only asking access to the wmde group, not the nda one, correct (no access to logstash, only the gerrit repos)? Unlike T257038, which requested both wmde AND nda access.

If thats's correct, there is not need for an nda as no special private acess will be granted, and only confirmation from your manager will be needed that you have a relationship with wmde.

@jcrespo I think I need everything. I must have made a mistake. I didn't know very well which things I had and which not.

Addshore renamed this task from Add Guergana Tzatchkova to the ldap/wmde group to Add Guergana Tzatchkova to the ldap/wmde and ldap/nda group.Jul 7 2020, 8:30 AM
Addshore updated the task description. (Show Details)
Addshore updated the task description. (Show Details)
Addshore subscribed.

Indeed this should be both the nda group and the wmde group.
(from memory we need to sign an and to be in the wmde group anyway).

Confirmation from a manager is at T256201#6267005

@ssingh It doesn't look like we have an NDA on file for Guergana. No problem. I can process once when I have the following info:

-Full legal name
-Mailing address
-Email address
-Specifics about the type of sensitive data they will be accessing (see here for examples https://wikitech.wikimedia.org/wiki/LDAP/Groups)

Please email me the info at kfrancis@wikimedia.org asap. Thanks!

@guergana.tzatchkova I added the "Specifics about the type of sensitive data" to the description of this ticket, but everything else you will need to email to @KFrancis :)

Indeed this should be both the nda group and the wmde group.
(from memory we need to sign an and to be in the wmde group anyway).

Confirmation from a manager is at T256201#6267005

Thanks, I have missed that with so many ongoing tickets.

Like Addshore says, waiting for NDA to be signed before proceeding.

@guergana.tzatchkova - I have the information I need. I sent the NDA for you to sign. Please be on the lookout for it. Thanks!

@jcrespo Confirming the NDA is complete. Thanks!

Thank you very much for the heads up! Will proceed now with the group granting.

For future reference, UID for cn=Guergana Tzatchkova is gtzatchkova.

@guergana.tzatchkova This is not required for access request, but consider adding your LDAP account (wikitech name) with your phabricator account at your user setting https://phabricator.wikimedia.org/settings/user/guergana.tzatchkova/page/external/ to link your identities.

Change 611232 had a related patch set uploaded (by Jcrespo; owner: Jcrespo):
[operations/puppet@production] admin: Add Guergana Tzatchkova (gtzatchkova) to the list of privileged ldap groups

https://gerrit.wikimedia.org/r/611232

Change 611232 merged by Jcrespo:
[operations/puppet@production] admin: Add gtzatchkova to the list of privileged ldap groups

https://gerrit.wikimedia.org/r/611232

jcrespo updated the task description. (Show Details)

Change has been deployed https://ldap.toolforge.org/user/gtzatchkova

Please test your privileged access and reopen if you have issues accessing some of the services so I can debug any access problems.