[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [libreoffice-website] Generic user for extensions site


Hi Daniel,

On Wed, 17 Jun 2020 at 09:00:56 -0300, Daniel Armando Rodriguez wrote:
> While the origin of the question lies in the documentation published on the
> extensions site, surely will be useful for more things, could a generic
> account for spanish documentation team be created to not depend on a
> particular user?

I strongly advice *against* using shared accounts as a way to emulate
groups. Accounts propagate from the Single Sign-On system to the
Service Providers, so that will lead to shared Wiki, gerrit, Redmine,
etc. accounts.

> The argument is that if a user uploads a document and later leaves the team,
> it is he who is listed as the document maintainer and not the team and
> therefore only he could update and so on...

Shared accounts are a nightmare for those who would need to jump in in
case of account compromise or vandalism. We would need to rotate the
shared credential upon team membership changes, thereby causing burden
to remaining members. Also which address should one put as primary
contact? A mailing list? Password reset tokens would end up in its
archives :-/ IMHO the only valid use case for shared credentials is
ephemeral shared secrets, such as a random jitsi room name or a random
pad name that would automatically be wiped/removed after some time.

Groups of users are a better fit for that workflow, and the only one
that works properly with the rest of our tooling. Not sure the site
allows granting write access to a group though. cloph?

Cheers,
--
Guilhem.

--
To unsubscribe e-mail to: website+unsubscribe@global.libreoffice.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.libreoffice.org/global/website/
Privacy Policy: https://www.documentfoundation.org/privacy

Follow-Ups:
Re: [libreoffice-website] Generic user for extensions siteChristian Lohmaier <lohmaier@googlemail.com>
Re: [libreoffice-website] Generic user for extensions site"Daniel A. Rodriguez" <drodriguez@documentfoundation.org>
References:
[libreoffice-website] Generic user for extensions siteDaniel Armando Rodriguez <drodriguez@documentfoundation.org>
Privacy Policy | Impressum (Legal Info) | Copyright information: Unless otherwise specified, all text and images on this website are licensed under the Creative Commons Attribution-Share Alike 3.0 License. This does not include the source code of LibreOffice, which is licensed under the Mozilla Public License (MPLv2). "LibreOffice" and "The Document Foundation" are registered trademarks of their corresponding registered owners or are in actual use as trademarks in one or more countries. Their respective logos and icons are also subject to international copyright laws. Use thereof is explained in our trademark policy.