1508356 - Please give mhentges access to project:mobile

Status: RESOLVED INVALID

(Infrastructure & Operations :: Infrastructure: LDAP, task)

Description

[Mitchell Hentges [:mhentges] 🦀]

I started to work on the android-components pipeline (like bug 1497475). He will need to make some other scopes/client changes in the future.

Dustin, could you give me the same rights as Johan Lorenzo does (on the project "mobile")?

Comment 1

[Dustin J. Mitchell [:dustin] (he/him)]

I can't make LDAP changes.  Please let the LDAP team know what LDAP group you need to be a part of (and get Johan to sign-off).

Comment 2

[Jordan Lund (:jlund)]

(In reply to Dustin J. Mitchell [:dustin] pronoun: he from comment #1)
> I can't make LDAP changes.  Please let the LDAP team know what LDAP group
> you need to be a part of (and get Johan to sign-off).

I can vouch for Mitchell.

Comment 3

[Mihai Tabara [:mtabara]⌚️GMT]

(In reply to Dustin J. Mitchell [:dustin] pronoun: he from comment #1)
> I can't make LDAP changes.  Please let the LDAP team know what LDAP group
> you need to be a part of (and get Johan to sign-off).

+1 from me too.

Comment 4

[Justin Dow [:jabba]]

Which LDAP group is needed? Mitchell is already a member of mobile_releases LDAP group.

Comment 5

[Mitchell Hentges [:mhentges] 🦀]

I'm not sure the LDAP group that is missing, but I do know that when I attempt to edit the reference-browser-nightly hook [1], it says that:

Client ID mozilla-auth0/ad|Mozilla-LDAP|mhentges does not have sufficient scopes and are missing the following scopes:

{
  "AllOf": [
    "hooks:modify-hook:project-mobile/reference-browser-nightly",
    "assume:hook-id:project-mobile/reference-browser-nightly"
  ]
}

Maybe the mobile-releases group is missing permissions for reference-browser-nightly?

1. https://tools.taskcluster.net/hooks/project-mobile/reference-browser-nightly

Comment 6

[Dustin J. Mitchell [:dustin] (he/him)]

The settings are all in https://tools.taskcluster.net/auth/roles.  The scopes assigned to the mobile_releases group are at
  https://tools.taskcluster.net/auth/roles/mozilla-group%3Amobile_releases
and you can work from there.

Comment 7

[Mitchell Hentges [:mhentges] 🦀]

Dustin and I investigated a bit:
I used to have an old account multiple years ago with the email "[e-mail]".
This account is obsolete - would it be possible to move all of its groups to the "[e-mail]" email?

Comment 8

[Justin Dow [:jabba]]

The [e-mail] account only has scm_level_1 membership, which [e-mail] also has. Please try logging out of sso.mozilla.com and back in to re-sync LDAP groups to auth0, that might resolve this.

Comment 9

[Mitchell Hentges [:mhentges] 🦀]

Perfect, the re-login resolved the issue. I have permissions for the mobile_releases role, and I'm able to modify the hook.
Thanks!