Page MenuHomePhabricator

DannyS712 "offboarding"
Closed, ResolvedPublic

Description

Its been a while, and I'm not sure what the right place to be requesting these is - a few technical requests related to me not being around anymore, not really offboarding, but please

  • remove my NDA access (I don't need to be able to view logstash anymore)
  • remove my +2 access
  • disable H322
  • remove from acl*security_volunteer

Details

Related Changes in Gerrit:

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald Transcript
Bugreporter subscribed.

To reduce security risk (of account compromise) we should also consider remove from acl*security_volunteer.

Peachey88 subscribed.

The SRE offboarding script should be able to handle all the privileged groups, individual teams shouldn't need to take action.

@DannyS712 should your entries on https://www.mediawiki.org/wiki/Git/Reviewers (under mediawiki/extensions/GlobalWatchlist & mediawiki/tools/codesniffer) also be removed for now?

(Thank you for your work on Wikimedia technical projects :))

Thanks for all your contributions! <3

Change #1223156 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove LDAP access for dannys712

https://gerrit.wikimedia.org/r/1223156

Change #1223156 merged by Muehlenhoff:

[operations/puppet@production] Remove LDAP access for dannys712

https://gerrit.wikimedia.org/r/1223156

MoritzMuehlenhoff subscribed.

@DannyS712 Thanks for your contributions! I've removed you from the cn=nda LDAP group

sbassett added a project: SecTeam-Processed.
sbassett subscribed.

Cleaned up a few additional Phab ACLs and projects.

@DannyS712 In addition to your MediaWiki +2 which I just revoked, do you want to give up other rights in Gerrit such as your pywikibot, ChessBrowser, and GlobalWatchlist rights?

Dzahn changed the task status from Open to Stalled.Tue, Jan 13, 11:25 AM
Dzahn triaged this task as Medium priority.
Dzahn moved this task from Untriaged to Awaiting User Input on the SRE-Access-Requests board.
Dzahn moved this task from Backlog to Awaiting User Input on the LDAP-Access-Requests board.

@DannyS712 In addition to your MediaWiki +2 which I just revoked, do you want to give up other rights in Gerrit such as your pywikibot, ChessBrowser, and GlobalWatchlist rights?

@bd808 Hi! My reading from https://phabricator.wikimedia.org/p/DannyS712/ is that the user is not active anymore, so I'd say that we can proceed with the cleanup that you proposed. I am not sure if the rights are difficult to be rolled back in case they are really needed, but if not I'd say to proceed with their removal. Lemme know your thoughts :)

Dzahn changed the task status from Stalled to Open.Tue, Feb 3, 4:39 PM
Dzahn removed DannyS712 as the assignee of this task.

@DannyS712 should your entries on https://www.mediawiki.org/wiki/Git/Reviewers (under mediawiki/extensions/GlobalWatchlist & mediawiki/tools/codesniffer) also be removed for now?

(noting that this was done by Umherirrender in https://www.mediawiki.org/w/index.php?title=Git/Reviewers&diff=prev&oldid=8157218)

Anything else left to do here?

Anything else left to do here?

FWICS there are still the additional Gerrit rights mentioned by @bd808 in T413634#11505670 (& @elukey in T413634#11573013)

Anything else left to do here?

FWICS there are still the additional Gerrit rights mentioned by @bd808 in T413634#11505670 (& @elukey in T413634#11573013)

I have now removed DannyS712 from the pywikibot, labs-tools-force-rebase, extension-ChessBrowser, and extension-GlobalWatchlist Gerrit groups. The account remains in the Trusted-Contributors group.

elukey claimed this task.

Closing since I don't see more actions left, please re-open if needed! Thanks to all :)