1380272 - Mozilla org doesn't show up in ZenHub WebApp

Status: RESOLVED FIXED

(mozilla.org :: Github: Administration, task)

Description

[Michael Kohler [:mkohler]]

I've read https://wiki.mozilla.org/Github, and need help with the following.

I've tried app.zenhub.com to improve my productivity. I was able to add all my personal (@MichaelKohler) GitHub repos to the board, as well as the repos from MozillaCH. However, I could not select the "mozilla" org. ZenHub has access to the mozilla org according to my GitHub settings page. 

I've noticed that I am a "External contributor" in the mozilla org, maybe it's because of this that I can't choose the mozilla org repos? Is there any way I can be added so I can have access to the repos from ZenHub?

The repos I'm interested in are (for now):
* activate.mozilla.community
* Reps

Thanks a lot!
Michael

Comment 1

[hwine]

Michael -- I don't know much about zenhub except that it wants to own the world! Let me see what I can find out. It is very odd that you can not add "Reps", where you are an admin.

Can you confirm with zenhub that you need to be an organization member, please? There may be another way to configure those repos for your access.

If zenhub can not resolve the issue, please need info me and I'll double check with a few folks. We tend to not approve OAuth applications that demand all access to all repos. This was probable "grandfathered in", but we've never had to deal with this before.

One way or another, please do respond back in this bug so we can track the answer for the next person.

Comment 2

[Michael Kohler [:mkohler]]

Thanks for the info, I will check with ZenHub.

Comment 3

[Henrik Mitsch [:hmitsch]]

I checked with ZenHub's CEO. Will copy the mail into the thread in a moment.

Comment 4

[Henrik Mitsch [:hmitsch]]

---------- Forwarded message ----------
From: Matt Butler <[e-mail]>
Date: Fri, Jul 7, 2017 at 6:47 PM
Subject: Re: ZenHub and Protected Branches
To: Henrik Mitsch <[e-mail]>


Hi Henrik, 

Thank you for your email, 

The far-reaching oauth permissions that we need to ask for due to how GitHub handles permissions have been a frequent problem for users. We would love to have a much more restricted permission set as ZenHub only needs access to Issues related metadata to work. We don't touch any of your code. 

Currently GitHub are working towards improving this, and have recently launched 'GitHub Apps' which does contain the permission structure needed here. However, it has launched with a dramatically lower rate limit that the current permissions set. This means ZenHub can not migrate just yet. We are currently working with the GitHub team to improve the rate limit so that we can migrate over. I don't have a time frame from the team on when this would be right now. 


[..]

I hope this helps, let me know if you have any follow up questions on this, 

Cheers,
Matt






On Thu, Jul 6, 2017 at 4:53 PM Henrik Mitsch <[e-mail]> wrote:

    Hi Matt,

    let me follow-up with a refined version of my question.

    Is there a way to configure ZenHub so that
    - the Oauth token only gets write access to GitHub issues and
    - there is no write permission on the code repo?

    [..]

    Best regards,
       Henrik

Comment 5

[Henrik Mitsch [:hmitsch]]

Hi Hal,

I agree that waiting for ZenHub/GitHub to come up with a solution that allows for more limited access is the optimal thing to do. Can we continue with our "grandfathered exceptions" and add Michael to the mozilla GitHub org?

Michael is part of the Reps Council which forms Mozilla's Leadership Body (https://www.mozilla.org/en-US/about/leadership/#reps-council). I can also personally vouch for him as we know each other since the release of Firefox 4.

Best regards,
   Henrik

Comment 6

[hwine]

Michael & Henrik -- thanks for doing that investigation including contacting the vendor. Having real users do that does help them apply pressure to GitHub. :)

I've sent an invite to you Michael - GitHub should send you email, or just go to https://github.com/mozilla to accept. I did not invite you to any teams -- that's up to the team maintainers to do.

Please do let me know if "org membership" was sufficient -- it definitely should be for "Reps" as you're already an admin.

Comment 7

[Michael Kohler [:mkohler]]

Thanks a lot! Now I can see mozilla repositories listed in ZenHub. But the ones I'm marked as collaborator on (like the Reps repo) don't show up in the list. Seems to be a bug on ZenHub's side though. I'm in touch with them to figure this out :)

Comment 8

[hwine]

:mkohler - any update?

Comment 9

[Michael Kohler [:mkohler]]

(In reply to Hal Wine [:hwine] (use NI) from comment #8)
> :mkohler - any update?

They have filed an internal issue. As a workaround, it's possible to use the browser extension and manually enter the org/repo to add it. So it worked out for me this way.

Comment 10

[hwine]

Great - closing this out now that we have a workaround.