Page MenuHomePhabricator

Define the core attribute list managed in the IDM with all stakeholders
Closed, InvalidPublic

Description

We have an initial idea of what attributes we want to manage and their level of availability

  • Required attributes for everyone (e.g. Wikimedia Developer username)
  • Attributes required for new accounts, but which will need backfilling to eventually allow tools to expect them (e.g. such information could be added via migration scripts or when people log into the IDM for the first time)
  • Optional core attributes (those are attributes that can be set for any user, but are not required)

In addition to the core attributes there will be further sets of attributes which are enabled via account profiles. E.g. If someone selects the Hadoop account profile, this might enable an additional attribute on the user (display in a configurable tab) which allows users to enter a Kerberos user principal.

We need to define an initial set of attributes and solicit input from others who operate services using the Wikimedia Developer accounts.

  • WDA username (mandatory)
  • Given name (optional)
  • Email address (mandatory)
  • Password (mandatory)
  • Shell name for SSH logins (optional)
  • SSH key(s) used for Toolforge/Cloud VPS access
  • Mediawiki SUL (standard unified login) account name (mandatory)
  • Boolean whether the user has a wikitech account corresponding to their WDA username
  • IRC username (optional) (needs to be specified in a way which also corresponds to a network)
  • Phabricator username (optional)
  • More TDB, maybe things like language preferences

Comments/suggestions extremely welcome :-)

Related Objects

StatusSubtypeAssignedTask
OpenNone
OpenNone
OpenNone
OpenSLyngshede-WMF
ResolvedNone
OpenNone
Opentaavi
OpenNone
Resolved Marostegui
ResolvedAndrew
Resolved Marostegui
ResolvedAndrew
DeclinedAndrew
ResolvedAndrew
ResolvedAndrew
ResolvedLadsgroup
DuplicateNone
Resolved Bstorm
DeclinedNone
Resolvedtaavi
ResolvedJdforrester-WMF
DeclinedNone
Openjijiki
OpenNone
OpenFeatureNone
StalledFeatureNone
OpenFeatureSLyngshede-WMF
OpenNone
OpenAndrew
OpenSLyngshede-WMF
OpenABran-WMF
Resolvedtaavi
ResolvedPRODUCTION ERRORTgr
OpenNone
Resolvedbd808
Resolvedyuvipanda
Resolvedbd808
Resolvedbd808
Resolvedbd808
Opentaavi
Resolvedtaavi
DeclinedNone
OpenNone
OpenSLyngshede-WMF
InvalidNone

Event Timeline

Ideally I'd like to reuse the "owner" field from groups as a field to identify who can approve access requests. We need to check that the field is not used for anything important in other systems.

This failed to live up to our expectations, and we'll instead add attributes on a need basis.