Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.

Bug 568069

Summary:	Requesting that all github committers on eclipse/jetty.project be granted rights for managing advisories
Product:	Community	Reporter:	Joakim Erdfelt <joakim.erdfelt>
Component:	GitHub	Assignee:	Eclipse Webmaster <webmaster>
Status:	CLOSED WONTFIX	QA Contact:
Severity:	normal
Priority:	P3	CC:	frederic.gurr, gregw, janb, jesse.mcconnell
Version:	unspecified
Target Milestone:	---
Hardware:	PC
OS:	Linux
Whiteboard:

Description Joakim Erdfelt

2020-10-21 08:12:19 EDT

On project:

https://github.com/eclipse/jetty.project


For Security Advisories:

https://github.com/eclipse/jetty.project/security


We are requesting that all committers on the Eclipse Jetty project
be granted the permission to create / manage / edit / publish
security advisories.

Comment 1 Greg Wilkins

2020-10-21 08:17:56 EDT

Specifically that rt-jetty-committers can create and manage security advisories.

This is my +1 as a project lead

Comment 2 Jesse McConnell

2020-10-21 08:20:30 EDT

+1

Comment 3 Frederic Gurr

2020-10-21 08:45:21 EDT

Unfortunately, GitHub only allows users with admin permissions to deal with security advisories. For security reasons, we can't give admin permissions to all Jetty committers.

The project leads (Greg Wilkins, Jesse McConnell and Jan Bartel) have admin permissions though.

Comment 4 Jan Bartel

2020-10-21 08:53:45 EDT

+1 from me too.

Comment 5 Greg Wilkins

2020-10-22 15:56:48 EDT

OK, but it appears something has changed and now I've lost permission to create new advisories or to publish the one that is ready to go.

Can you check that the project leaders were not accidentally removed?

Comment 6 Frederic Gurr

2020-10-23 05:11:29 EDT

We now grant maintain permissions to all project leads by default. This bulk change removed your admin permissions temporarily. I've set the admin permissions again.

Comment 7 Frederic Gurr

2020-10-23 05:24:19 EDT

Your permissions might be automatically reset to "maintain" again, since there is one more change that needs to be merged to keep this from happening. This should be fixed for good before EOB. Sorry for the inconvenience.

Comment 8 Frederic Gurr

2020-10-23 14:08:40 EDT

The last change has been committed and works as expected. You should be good to go.