1509281 - Insufficient scopes for retriggering and backfilling

Status: RESOLVED FIXED

(Taskcluster :: General, defect, P1)

Description

[Ionuț Goldan [:igoldan]]

Attachment: tree-error.png

[e-mail] gets the error message I've attached when trying to backfill a Talos job.
Also, he's not able to retrigger jobs either.

We need him to have the appropriate rights to do Perf sheriffing.

Comment 1

[Florin Strugariu [:Bebe]]

I should have received the appropriate rights in bug 1508764 but getting an error when trying to re-trigger

Comment 2

[Ionuț Goldan [:igoldan]]

:bstack could you help us with this issue?

Comment 3

[Ed Morley [:emorley]]

Bug 1508764 gave is_staff permissions in Treeherder which gives the ability to triage alerts.

Retriggering/backfilling jobs is different since it requires permissions (scopes) on Taskcluster instead, which are derived from LDAP groups.

It looks like fstrugariu@ does not have SCM level 3 commit access.

Comment 4

[Ionuț Goldan [:igoldan]]

(In reply to Ed Morley [:emorley] from comment #3)
> Bug 1508764 gave is_staff permissions in Treeherder which gives the ability
> to triage alerts.
> 
> Retriggering/backfilling jobs is different since it requires permissions
> (scopes) on Taskcluster instead, which are derived from LDAP groups.
> 
> It looks like fstrugariu@ does not have SCM level 3 commit access.

Yes, I've just read this old bug 1368657 and remembered about this detail.

Comment 5

[Ionuț Goldan [:igoldan]]

If we need someone's vouch, just let me know.

Comment 6

[Ed Morley [:emorley]]

The Taskcluster team are (as far as I'm aware) unable to give out SCL level permissions.

The process that needs to be followed is documented here:
https://www.mozilla.org/en-US/about/governance/policies/commit/

Perhaps it's also worth updating the perf sheriff onboarding docs to mention requesting SCM level 3 as an additional step? :-)

Comment 7

[Ionuț Goldan [:igoldan]]

(In reply to Ed Morley [:emorley] from comment #6)
> Perhaps it's also worth updating the perf sheriff onboarding docs to mention
> requesting SCM level 3 as an additional step? :-)

Yes, we must do that.

Comment 8

[Florin Strugariu [:Bebe]]

:emorley I now have Level 3 access. 
Do we need to add anything to treherder to be able to retrhigger/backfill

Comment 9

[Ed Morley [:emorley]]

No, it should work after a log out/in.

If it does not, it's still a Taskcluster issue, since Treeherder plays no role in determining permissions for retrigger/backfill.

Comment 10

[Ed Morley [:emorley]]

s/Taskcluster/Taskcluster or LDAP or Auth0 sync/

Comment 11

[Florin Strugariu [:Bebe]]

works now.

Thanks

clearing need info