[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #27282 [Internal Services/Service - trac]: Remove trac admin permissions from inactive users
#27282: Remove trac admin permissions from inactive users
----------------------------------------------+--------------------------
Reporter: teor | Owner: teor
Type: task | Status: assigned
Priority: Medium | Milestone:
Component: Internal Services/Service - trac | Version:
Severity: Normal | Resolution:
Keywords: | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
----------------------------------------------+--------------------------
Comment (by teor):
Replying to [comment:9 qbi]:
> Replying to [ticket:27282 teor]:
>
> > If someone hasn't logged in for 6 months, we remove all their
permissions.
>
>
>
https://trac.torproject.org/projects/tor/wiki/org/operations/services/trac
says that TRAC_ADMIN permissions will be removed. If this should be the
policy, I suggest also remove them from groups which contain TRAC_ADMIN as
a permission.
>
> However the above sentence could also be understood in a way that those
users are downgraded to anonymous or authenticated users. It might also be
a good policy to downgrade them to authenticated users. So all other
special permissions which were collected over time get removed.
Thanks for the feedback. I have changed the draft policy so that we remove
all special permissions,
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27282#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs