1447971 - Please add queue:get-artifact:project/gecko/android-ndk/* scope to mozilla-ldap/[e-mail]/fennec

Status: RESOLVED FIXED

(Taskcluster :: Operations and Service Requests, task)

Comment 1

[Dustin J. Mitchell [:dustin] (he/him)]

If I add that scope to that clientId, the clientId will be automatically disabled since bli does not have that scope.

Is there and LDAP group of people that need access to this particular artifact name prefix?

Comment 2

[Chris AtLee [:catlee]]

How is it that she has the android-sdk/* scope? The ndk scope should be added to the same place I guess.

Comment 3

[Dustin J. Mitchell [:dustin] (he/him)]

https://tools.taskcluster.net/auth/roles/moz-tree:level:1:* has queue:get-artifact:project/gecko/android-* so if one exists, then the other should, too.  I don't see anything about android-sdk/* specifically.

Comment 4

[Bingqing Li]

(In reply to Dustin J. Mitchell [:dustin] pronoun: he from comment #3)
> https://tools.taskcluster.net/auth/roles/moz-tree:level:1:* has
> queue:get-artifact:project/gecko/android-* so if one exists, then the other
> should, too.  I don't see anything about android-sdk/* specifically.


I don't know what have happened to the old client 'mozilla-ldap/[e-mail]' and 'mozilla-ldap/[e-mail]/fennec'. 
As far as I can recall, when I visited https://tools.taskcluster.net/credentials, ClientId was 'mozilla-ldap/[e-mail]', but now it's 'mozilla-auth0/ad|Mozilla-LDAP|bli'.

Since 'mozilla-auth0/ad|Mozilla-LDAP|bli' has queue:get-artifact:project/gecko/android-*, I created a new client under 'mozilla-auth0/ad|Mozilla-LDAP|bli', and the queue:get-artifact:project/gecko/android-ndk/* scope could be added.

Comment 5

[Dustin J. Mitchell [:dustin] (he/him)]

Sounds like you fixed it up!