| Unknown Object (User) |
| Unknown Object (User) | |
| Oct 9 2022, 20:45 |
Shell name: mediawiki-admins
Requested access: swift client
Rationale for access: it is needed to make actions on swift files, this includes downloading which is needed for ImportDump to work with swift. Since ImportDump is used by mediawiki-admins they will need access to the swift client to use it, amongst other reasons why they may need to use the swift client for some actions.
PR by @Paladox: https://github.com/miraheze/puppet/pull/2910
| Status | Assigned | Task | ||
|---|---|---|---|---|
| Resolved | Paladox | T9708 [GOAL] Gluster -> Swift | ||
| Invalid | Unknown Object (User) | T9821 [ACCESS REQUEST] Expanded access for mediawiki-admins |
Since mw-admins currently has access to the files mount, I see no reason why this shouldn't be allowed.
I have no objections, though the decision ultimately is Reception's as SRE-MW for access expansions. It's only new appointments that require joint decisions.
After further thought I'd like to know whether there's some way of applying some sort of restrictions to this. For example, I'd rather restrict the possibility to do swift delete --all which would mean that with one command every single file can be removed.
Paladox's PR was closed, and it seems this was actually not needed to access the cli.