[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [libreoffice-website] Generic user for extensions site


El mié., 17 jun. 2020 11:27, Guilhem Moulin <guilhem@libreoffice.org>
escribió:

> Hi Daniel,
>
> On Wed, 17 Jun 2020 at 09:00:56 -0300, Daniel Armando Rodriguez wrote:
> > While the origin of the question lies in the documentation published on
> the
> > extensions site, surely will be useful for more things, could a generic
> > account for spanish documentation team be created to not depend on a
> > particular user?
>
> I strongly advice *against* using shared accounts as a way to emulate
> groups. Accounts propagate from the Single Sign-On system to the
> Service Providers, so that will lead to shared Wiki, gerrit, Redmine,
> etc. accounts.
>
> > The argument is that if a user uploads a document and later leaves the
> team,
> > it is he who is listed as the document maintainer and not the team and
> > therefore only he could update and so on...
>
> Shared accounts are a nightmare for those who would need to jump in in
> case of account compromise or vandalism. We would need to rotate the
> shared credential upon team membership changes, thereby causing burden
> to remaining members. Also which address should one put as primary
> contact? A mailing list? Password reset tokens would end up in its
> archives :-/ IMHO the only valid use case for shared credentials is
> ephemeral shared secrets, such as a random jitsi room name or a random
> pad name that would automatically be wiped/removed after some time.
>
> Groups of users are a better fit for that workflow, and the only one
> that works properly with the rest of our tooling. Not sure the site
> allows granting write access to a group though. cloph?
>

If so, that will do the job.

>

--
To unsubscribe e-mail to: website+unsubscribe@global.libreoffice.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.libreoffice.org/global/website/
Privacy Policy: https://www.documentfoundation.org/privacy

References:
[libreoffice-website] Generic user for extensions siteDaniel Armando Rodriguez <drodriguez@documentfoundation.org>
Re: [libreoffice-website] Generic user for extensions siteGuilhem Moulin <guilhem@libreoffice.org>
Privacy Policy | Impressum (Legal Info) | Copyright information: Unless otherwise specified, all text and images on this website are licensed under the Creative Commons Attribution-Share Alike 3.0 License. This does not include the source code of LibreOffice, which is licensed under the Mozilla Public License (MPLv2). "LibreOffice" and "The Document Foundation" are registered trademarks of their corresponding registered owners or are in actual use as trademarks in one or more countries. Their respective logos and icons are also subject to international copyright laws. Use thereof is explained in our trademark policy.