Permission for custom queries and PII on crash-stats for ekyle

RESOLVED FIXED

Status

Socorro
General
RESOLVED FIXED
2 years ago
2 years ago

People

(Reporter: ekyle, Assigned: peterbe)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

I, Kyle Lahnakoski, acknowledge the following rules are to be obeyed when dealing with Socorro and crash stats data:

* Crash dumps contain memory contents, and may contain private user data.

* Only access dumps as necessary.

* Keep them securely on Mozilla hardware.

* When finished with a dump, delete it (within 30 days)

* Do not share personal data from the dump publicly (on bugzilla, irc, etc)

* Do not share personal data with non-employees, including partner
  organizations, without consultation and explicit permission from
  Peter Bengtsson (peterbe@mozilla.com) or Lonnen (lonne@mozilla.com).
  A signed NDA and other arrangements will be required of the other organization.

* It is fine to share stack traces, analysis, and other non-personal data

* Access is conditional on employment and will be revoked upon departure from Mozilla
(Reporter)

Comment 1

2 years ago
Adding jgriffin, my manager, to vouch for me.
(In reply to Kyle Lahnakoski [:ekyle] from comment #1)
> Adding jgriffin, my manager, to vouch for me.

I vouch for Kyle's access to this data, if that's needed.
(Assignee)

Comment 3

2 years ago
Kyle, Thanks. You're acked. We'll take care of it. Just need to figure out our own configuration of groups.

Lonnen, Adrian; Note: We don't have  specific group for "Run Custom Queries in Super Search". 
Is it not so that having that permission is the same as viewing PII etc? If so, can we include this permission with the "Hackers" group?
Assignee: nobody → peterbe
Flags: needinfo?(adrian)
Running Custom Queries is mostly identical to viewing PII, with the added risk that there is no validation of the request, so it is possible for users to run broken queries, scripts, and so on. I'd be in favor of not adding that permission to the Hacker group, and either adding it to Hacker Plus or creating a new group.
Flags: needinfo?(adrian)
(Assignee)

Comment 5

2 years ago
Kyle, 
With great powers comes great responsibility. 
Go to https://crash-stats.mozilla.com/profile/ to get a listing of your permissions you have now.
Status: NEW → RESOLVED
Last Resolved: 2 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.