Page MenuHomePhabricator

Grant Access to wmde and nda for Maria Lechner WMDE
Closed, ResolvedPublic

Description

  • The username of your existing LDAP account on https://idm.wikimedia.org or https://gerrit.wikimedia.org: marialechnerwmde
  • Do you currently have shell access? No
  • Purpose: As a Program Manager, I need access to Superset (see T404359) for internal monitoring and reporting reasons.
  • The specific LDAP group that you want to be added to: WMDE, NDA

I have yet to sign the WMF NDA (maria.lechner AT wikimedia DOT de). @KFrancis

Pinging @WMDE-leszek (EM) for approval.

Event Timeline

@Maria_Lechner_WMDE: Hi, which documentation were you following creating this ticket? Asking as WMF-NDA-Requests is not the right project tag, LDAP-Access-Requests feels more relevant. So there might be some docs to improve. :)

Hi all, may I move forward with processing the NDA?

This ticket is mostly a duplicate of T405917 now. (but don't worry about it too much, not a big deal, it is being handled either way)

What is actually needed here:

  • LDAP group "wmde" (LDAP-Access-Requests)
  • LDAP group "nda" (LDAP-Access-Requests)
  • shell group analytics-privatedata-users - variant "without shell access" (SRE-Access-Request)

This will resolve both tickets.

@Aklapper They did it in response to T405917#11229323

@KFrancis Yes, you can just mail them. The email address is the standard firstname.lastname@wikimedia.de

general comment about the process: In my opinion the separation between the 2 types of access request tags in Phabricator isn't very helpful anymore. The tickets are handled by the same people and a request like this that combines analytics-privatdata-users with some LDAP groups is common.

The easiest fix is to just tag it with both. The other to merge the tags.

This specific type of request has become standard for WMDE staff afaict. A custom form for it would probably be helpful. So that it's clear for clinic duty and the new WMDE staff doesn't have to worry about the details.

Thank you, @Aklapper. The agreement has been sent out for signatures. I'll confirm when it's complete.

not that my opinion matters but I support @Dzahn's point

This specific type of request has become standard for WMDE staff afaict. A custom form for it would probably be helpful. So that it's clear for clinic duty and the new WMDE staff doesn't have to worry about the details.

Given we are increasingly using private-data-based superset to monitor our goals etc there is expected inflow of those requests in the upcoming weeks. I was actually meaning to open half a dozen of these this week but held it off to see how Maria's request develops. It is not a thing WMDE would be requesting very often, we won't have a new staff member joining every week etc, but it will be a somewhat regular procedure. We would be happy to submit simple unambiguous requests, as it surely also helps you as well. Thanks!

Change #1196396 had a related patch set uploaded (by Ladsgroup; author: Amir Sarabadani):

[operations/puppet@production] admin: Add Maria Lechner WMDE to LDAP only list

https://gerrit.wikimedia.org/r/1196396

Change #1196396 merged by Ladsgroup:

[operations/puppet@production] admin: Add Maria Lechner WMDE to LDAP only list

https://gerrit.wikimedia.org/r/1196396

jijiki claimed this task.
jijiki subscribed.

Added to nda and wmde ldap groups.

Change #1196641 had a related patch set uploaded (by Effie Mouzeli; author: Effie Mouzeli):

[operations/puppet@production] data.yaml: add marialechnerwmde to analytics_privatedata_users

https://gerrit.wikimedia.org/r/1196641