cloudfoundry/community

Cleanup the access permissions of github users not managed by the CFF ogranization automation

beyhan opened this issue · 5 comments

beyhan commented

The current version of the automation which we have in place maintains the access permissions for the CFF organization repositories on github teams level. It doesn't manage the access permissions of individual github users to github repositories. That is why there are still users with access permissions to the CFF organization repositories which shouldn't be there. This issue is about finding a way for automatic and periodical cleanup of such user permissions.

This is a result of the discussions during the TOC meeting on 2023-02-07.

Gerg commented

For the App Runtime Interfaces working group, the following users are expected to lose access to the respective repositories:

@KevinJCross - cloudfoundry/app-autoscaler-cli-plugin
@stanimirovn - cloudfoundry/docs-buildpacks
@hibell - cloudfoundry/ibm-websphere-liberty-buildpack
@kevin-ortega - cloudfoundry/ibm-websphere-liberty-buildpack
@sclevine - cloudfoundry/dotnet-core-buildpack
@arjun024 - cloudfoundry/buildpacks-ci
@brayanhenao - cloudfoundry/buildpacks-ci
@GarimaSharma - cloudfoundry/buildpacks-workstation
@mgibson1121 - cloudfoundry/buildpacks-workstation
@arjun024 - cloudfoundry/libbuildpack
@brayanhenao - cloudfoundry/libbuildpack
@arjun024 - cloudfoundry/switchblade
@brayanhenao - cloudfoundry/switchblade
@matt-royal - cloudfoundry/cloud_controller_ng
@soochow - cloudfoundry/capi-team-checklists
@weymanf - cloudfoundry/cc-uploader
@maximilien - cloudfoundry/cli-i18n
@davidschachner - cloudfoundry/cli-docs-scripts
@blgm - cloudfoundry/jsonry
@xtreme-bozhidar-lenchov - cloudfoundry/notifications-release

If you would like to maintain access, please submit a PR as described in Roles.md to add yourself to the appropriate working group area(s). I'm happy to help with this process however I can.

Thanks!

ameowlia commented

For the App Runtime Platform group...

👉 If it is a bot --> it will need to be added to the bot group.
👉 If it is for an individual --> you can create a PR to become an approver in your area.
👉 If the permissions are no longer needed --> do nothing! they will be deleted in Jan 2024.
👉 Need help? ---> ask!

rkoster commented

For Foundational Infrastructure:

👉 If it is a bot --> it will need to be added to the bot group.
👉 If it is for an individual --> you can create a PR to become an approver in your area.
👉 If the permissions are no longer needed --> do nothing! they will be deleted in Jan 2024.
👉 Need help? ---> ask!

rkoster commented

For Foundational Infrastructure (continued):

👉 If it is a bot --> it will need to be added to the bot group.
👉 If it is for an individual --> you can create a PR to become an approver in your area.
👉 If the permissions are no longer needed --> do nothing! they will be deleted in Jan 2024.
👉 Need help? ---> ask!

voelzmo commented

Sounds good to me, thanks for the ping!