Page MenuHomePhabricator

Subscription to security@wikimedia.org
Closed, ResolvedPublic

Description

Hey all,

I'd like to request access to the security@wikimedia.org mailing-list. I'm a new hire in the SRE/Traffic team.
My email address is dkertesz@wikimedia.org.

Thanks in advance,
Daniel

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald Transcript
Rsilvola changed the task status from Open to In Progress.Tue, Sep 15, 3:40 PM
Rsilvola claimed this task.
Rsilvola added a project: SecTeam-Processed.
Rsilvola moved this task from Incoming to In Progress on the Security-Team board.
Rsilvola subscribed.

Hello @dkertesz,

Could you please specify for what purpose you need access to the security@ mailing-list?
Also, please include your supervisor in this request, for their approval.

Thanks!

Hello @dkertesz,

Could you please specify for what purpose you need access to the security@ mailing-list?
Also, please include your supervisor in this request, for their approval.

Thanks!

Hi @Rsilvola: @dkertesz is joining the Traffic team as an SRE, so he needs to have access in order to do his regular work and as part of his on-call duties. Approving as his manager.

Rsilvola removed Rsilvola as the assignee of this task.EditedTue, Sep 15, 6:04 PM
Rsilvola moved this task from In Progress to Incoming on the Security-Team board.
Rsilvola removed a project: SecTeam-Processed.

Thank you @ssingh ,

SRE on-call duty inherently meets the criteria for ongoing, proactive, and wide access to security tickets, as set in the policy.

It also meets the requirements for security@ access.

SRE on-call duty inherently meets the criteria for ongoing, proactive, and wide access to security tickets, as set in the policy.

This task was just for security@ access, not Phabricator security access.

I think SREs should have access to both, by default. If a justification is required for audit purposes, that's fine but unless there is something else in Security that I am missing, I am happy to update the checklist to suggest that SREs should ask for access to both things, since we need it for on-call work.

I know this task is not the place to discuss that, so I will set that up offline.

Hi folks, checking if something else is pending from Traffic's end, including approvals, for this?

sbassett claimed this task.
sbassett triaged this task as Medium priority.

SRE on-call duty inherently meets the criteria for ongoing, proactive, and wide access to security tickets, as set in the policy.

It also meets the requirements for security@ access.

Hi folks, checking if something else is pending from Traffic's end, including approvals, for this?

Per the above feedback from @Rsilvola, I've added dkertesz@wikimedia.org to security@wikimedia.org in Google groups. I'm going to resolve this task for now. If Daniel will need Phabricator security access, please file another task and we can address that as a separate item. Thanks.