Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.

Bug 453670

Summary:	Hudson jobs that (still) refer to "callisto-dev" in permissions
Product:	Community	Reporter:	David Williams <david_williams>
Component:	Cross-Project	Assignee:	Eclipse Webmaster <webmaster>
Status:	RESOLVED FIXED	QA Contact:
Severity:	normal
Priority:	P3
Version:	unspecified
Target Milestone:	---
Hardware:	PC
OS:	Linux
Whiteboard:

Description David Williams

2014-11-30 16:57:21 EST

Long long ago, there was some circumstance (I think just copy/paste?) that lead to many projects giving "permission" to the callisto-dev group to do things to their Hudson jobs. In most case, from a casual glance, that's full permission, to build, delete, modify, etc. 

And of course that's too broad, since "callisto-dev" includes 50 to 70 people involved in "simultaneious release". 

It has been pretty well cleaned up, but I still see about 15 or so jobs that have that in their "config.xml". (List below). 

If projects are no longer using these jobs (having since moved to HIPP instance) the fix is easy ... just delete the job from the shared Hudson instance. (Which, should be done anyway, if people are no longer using the shared instance). 

If the job is "still in use" then the "project specific permissions" should be edited to remove the entry for ROLE_CALLISTO-DEV. 

amp-integration/config.xml
amp-nightly/config.xml
cbi-atf-0.3-nightly/config.xml
cbi_henshin_nightly/config.xml
cbi-soa-jwt-integration/config.xml
cbi-wtp-inc-xquery/config.xml
cbi-wtp-relaxng/config.xml
cbi-wtp-wst.dtd/config.xml
emf-teneo-maintenance-2.0.0/config.xml
emft-texo-nightly/config.xml
gyrex-integration/config.xml
gyrex-nightly/config.xml
m2m-atl-3.1/config.xml
m2m-atl-master/config.xml
m2t-acceleo-3.0/config.xml
MWE-Language-nightly-HEAD/config.xml
MWE-nightly-HEAD/config.xml
mylyn-docs-vex.ci/config.xml
Xtext-integration-test/config.xml
Xtext-nightly-HEAD/config.xml

Comment 1 David Williams

2014-11-30 17:00:25 EST

I'm going to assign this one to "webmasters", since, I'd recommend after a week or two, if projects have not cleaned these up, that you use your "root powers" to go in and clean them up ... minor security issue? 

Of course, the jobs that start with "simrel" still use the "callisto-dev" group, but there it is appropriate, since those committers should be able to start jobs, etc., for the simrel aggregation. 

Thanks,

Comment 2 Eclipse Webmaster

2014-12-05 10:31:00 EST

Ok I've removed the callisto-dev group from these jobs and have gotten in touch with the projects that have a hipp instance and a job here about cleaning things up.

-M.