1011277 - Security Review: Democratize API access on Mozillians.org

Status: RESOLVED INVALID

(mozilla.org :: Security Assurance: Applications, task)

Description

[Justin Crawford [:hoosteeno] [:jcrawford]]

Initial Questions:

Project/Feature Name: Democratize API access on Mozillians.org
Tracking  ID:1011209
Description:
We want to give every vouched Mozillian on Mozillians.org access to the API. We have created rules for getting these keys and for the data they grant access to and we'll be rigorously documenting and communicating about this. 
Additional Information:

Key Initiative: Grow contributor base
Release Date: 2014-07-31
Project Status: active
Mozilla Data: Yes
Mozilla Related: 
Separate Party: No

Security Review Questions:

Affects Products: No
Review Due Date: 2014-07-22
Review Invitees: :giorgos, :williamr
Extra Information:

Comment 1

[Justin Crawford [:hoosteeno] [:jcrawford]]

I just put together a wiki backgrounder on this feature to help you get acquainted with the proposal:

https://wiki.mozilla.org/Mozillians/API-Access

Comment 2

[Yvan Boily [:ygjb][:yvan]]

Is the code for this ready for review or staged somewhere for testing?

Comment 3

[Justin Crawford [:hoosteeno] [:jcrawford]]

The code is not ready. Will update this bug when it is.

Comment 4

[Yvan Boily [:ygjb][:yvan]]

Ok, Curtis to bring back into triage when this is updated.

Comment 5

[Curtis Koenig [:curtisk-use curtis.koenig+bzATgmail.com]]]

Just checking to see where we are with regards to security work

Comment 6

[Justin Crawford [:hoosteeno] [:jcrawford]]

I'm needinfoing :giorgos in my stead.

Comment 7

[Giorgos Logiotatidis [:giorgos]]

We have no new code merged in yet. this project has been pushed back a couple of weeks. :williamr will provide future updates.