Re: [libreoffice-website] Generic user for extensions site

Hi Daniel,

On Wed, 17 Jun 2020 at 09:00:56 -0300, Daniel Armando Rodriguez wrote:
> While the origin of the question lies in the documentation published on the
> extensions site, surely will be useful for more things, could a generic
> account for spanish documentation team be created to not depend on a
> particular user?

I strongly advice *against* using shared accounts as a way to emulate
groups.  Accounts propagate from the Single Sign-On system to the
Service Providers, so that will lead to shared Wiki, gerrit, Redmine,
etc. accounts.

> The argument is that if a user uploads a document and later leaves the team,
> it is he who is listed as the document maintainer and not the team and
> therefore only he could update and so on...

Shared accounts are a nightmare for those who would need to jump in in
case of account compromise or vandalism.  We would need to rotate the
shared credential upon team membership changes, thereby causing burden
to remaining members.  Also which address should one put as primary
contact?  A mailing list?  Password reset tokens would end up in its
archives :-/  IMHO the only valid use case for shared credentials is
ephemeral shared secrets, such as a random jitsi room name or a random
pad name that would automatically be wiped/removed after some time.

Groups of users are a better fit for that workflow, and the only one
that works properly with the rest of our tooling.  Not sure the site
allows granting write access to a group though.  cloph?

Cheers,
-- 
Guilhem.

-- 
To unsubscribe e-mail to: website+unsubscribe@global.libreoffice.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.libreoffice.org/global/website/
Privacy Policy: https://www.documentfoundation.org/privacy