On 01/25/2017 10:04 AM, Brian Wolff wrote: +1. Subbu.

On Wed, Jan 25, 2017 at 2:48 PM, Kevin Smith <ksmith(a)wikimedia.org> wrote: Kevin Smith +2 (Expected, but not automatic sounds right to me, too.)

On Wed, Jan 25, 2017 at 12:55 PM, Alex Monk <krenair(a)gmail.com> wrote: ​I am a developer, but not a wikimedia developer (yet?). That's why I'm not exactly clear on the potential risks of giving +2 rights to someone who intends harm. We are talking about exactly the same situation: Someone was a productive volunteer, then staff, then no longer staff. 99+% of the time, they should retain their rights, or get them back shortly after leaving. But there may be cases where someone would be disgruntled, and if rights are automatic in all cases, such a person could do damage. I'm just suggesting that there should be a quick and simple check to be sure that's not the case. Being without rights for a couple days doesn't seem like a small price to pay for the safety of the project. ​Kevin​

On 25/01/17 22:03, Alex Monk wrote: Hello, That is quite a bold statement Alex. Being staff or contractor to the foundation is quite a different scope than acting as volunteer. There are deadlines, work to be done that you would prefer not, some internal drama and politics. And for staff potentially clash with management and colleague. The staff period can have changed the state of mind of the person, even had it been a volunteer before employment. If leaving in bad terms with an eventual envy of retaliation against the project, then code get screwed. A very basic exit interview would clarify the future ground and as Kevin said in 99% of case it will be a non issue. But we might catch the 1% lone wolf that will eventually cause havoc. For the price of a few minutes interview, I think it is worth it. Imho, when staff / contractor finish their relationship with the foundation, all rights should be removed and the process should start over (eg: make sure the volunteer as a NDA signed and is only granted appropriate rights). cheers, -- Antoine "hashar" Musso

How is that different from becoming disgruntled while still working at WMF? Or becoming disgruntled without ever joining? Or stolen credentials? On Wed, Jan 25, 2017, 16:01 Kevin Smith <ksmith(a)wikimedia.org> wrote: On Wed, Jan 25, 2017 at 12:55 PM, Alex Monk <krenair(a)gmail.com> wrote: ​I am a developer, but not a wikimedia developer (yet?). That's why I'm not exactly clear on the potential risks of giving +2 rights to someone who intends harm. We are talking about exactly the same situation: Someone was a productive volunteer, then staff, then no longer staff. 99+% of the time, they should retain their rights, or get them back shortly after leaving. But there may be cases where someone would be disgruntled, and if rights are automatic in all cases, such a person could do damage. I'm just suggesting that there should be a quick and simple check to be sure that's not the case. Being without rights for a couple days doesn't seem like a small price to pay for the safety of the project. ​Kevin​ _______________________________________________ Wikitech-l mailing list Wikitech-l(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l

On 25 January 2017 at 21:24, Brian Wolff <bawolff(a)gmail.com> wrote: That's what I'm concerned about. Yurik's rights were granted via a vote of developers and therefore I have decide to require an explanation.

Yes, they're announced on wikitech-l: https://lists.gt.net/wiki/wikitech/335950 If you go back through one of the pages linked in that email to the date it was sent, you find the relevant vote too: https://www.mediawiki.org/w/index.php?title=Gerrit/Project_ownership&ol… Even without that, the audit log shows the user was added to the group a) by Sumanah, and b) before it was announced that Yurik had joined the foundation. On 25 January 2017 at 21:43, Gergo Tisza <gtisza(a)wikimedia.org> wrote:

Update: I demanded an explanation for Yurik's removal, nobody would give a good one, I revoked ops' administrative rights, and now I've been removed as a gerrit administrator with ops re-added.

Correct me if I'm wrong but I think If someone has +2 rights before joining WMF, leaving WMF is not a reason to remove rights at all. If there was a case someone abuse their power and gets fired because of that. "The abuse" should be the reason to lose the right not "leaving WMF"/"being fired"/etc.. Best On Thu, Jan 26, 2017 at 12:35 AM Brian Wolff <bawolff(a)gmail.com> wrote:

Stas Malyshev wrote: Hi. For what it's worth, <https://www.mediawiki.org/wiki/Gerrit/%2B2> specifically emphasizes that +2 is a big deal. Revocation of +2 is documented at <https://www.mediawiki.org/wiki/Gerrit/%2B2#Revocation>. MZMcBride

Hi, On 01/26/2017 08:03 AM, Quim Gil wrote: Yes, thanks. I respectfully ask people not further respond to this thread, if you have questions please ask me offlist. -- Legoktm