Hi everyone,
There's been a minor change to how the Gerrit groups are setup. This
shouldn't really
affect that many people in practice, but I wanted to let everyone know.
In case you didn't already know, up until now Gerrit groups have been
self-managing--
this means they could add and remove users from their own groups. In
practice, not many
people actually did this, since we've been asking all access changes
to go through
MediaWiki.org[0] for documentation purposes.
I've just changed the owner of all groups (other than a handful of
sensitive ones that belong
to administrators & ops, plus the training group) to the "Project &
Group Creators" group[1].
I did this for 2 reasons:
1) These users need to be able to manage groups, since they're
creating them...since
some permissions tweaks I did last week, they've been unable to do
this (although I
don't think anyone noticed ;-)
2) To insure that access isn't getting granted without a paper trail.
This is more to
prevent accidents rather than malice. It's easy to mess up settings
in gerrit. That
and we can now be sure everyone goes through the same process :)
Again, almost nobody should be affected (unless you've been adding
users), but just
FYI.
-Chad
[0]
https://gerrit.wikimedia.org/r/#/admin/groups/119,members
[1]
https://www.mediawiki.org/wiki/Git/Gerrit_project_ownership
PS: If you are doing group creation/editing and you have any
questions, please let
me know.