1340668 - Insufficient permissions to add a job to queue on try, despite having L3 committer access

Status: RESOLVED FIXED

(Taskcluster :: Services, defect)

Description

[William Lachance (:wlach)]

Attachment: error I see in treeherder

So in testing my code for bug 1322433, it turns out that I don't have sufficient permissions/scopes to do a custom retrigger on this job:

https://treeherder.allizom.org/#/jobs?repo=try&revision=205d7c73b3edce56ee01cb8eac6da66637bc55d5&selectedJob=70534463

... despite having L3 committer writes and being logged in via okta (as [e-mail])

:bstack can do the retrigger just fine, but I guess he has * permissions.

Comment 1

[Greg Arndt [:garndt]]

It looks like this might have been introduced here https://hg.mozilla.org/mozilla-central/rev/b7ec9bebd877#l3.181

I think only the twig projects start with projects/.  

Others might be top level repos like try and mozilla-central.

Some are under releases/ like mozilla-aurora
Integration branches (m-i, autoland) are under integration/

Comment 2

[Greg Arndt [:garndt]]

Brian found this snippet that should work out: 
https://dxr.mozilla.org/mozilla-central/source/taskcluster/taskgraph/decision.py#187-191

Comment 3

[Brian Stack [:bstack]]

Attachment: Bug 1340668 - Fix repo scopes in action.json generation

Review commit: https://reviewboard.mozilla.org/r/113582/diff/#index_header
See other reviews: https://reviewboard.mozilla.org/r/113582/

Comment 4

[Greg Arndt [:garndt]]

Comment on attachment 8838776 [details]
Bug 1340668 - Fix repo scopes in action.json generation

https://reviewboard.mozilla.org/r/113582/#review115148

Comment 5

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/69dc3f79527d
Fix repo scopes in action.json generation r=garndt

Comment 6

[Wes Kocher (:KWierso) (Not reading bugmail; email directly if needed)]

https://hg.mozilla.org/mozilla-central/rev/69dc3f79527d