Closed Bug 1613581 Opened 5 years ago Closed 2 months ago

Remove treestatus LDAP group

Categories

(Infrastructure & Operations :: Infrastructure: LDAP, task)

Product:
Infrastructure & Operations
Component:
Infrastructure: LDAP
Type:
task

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: tomprince, Unassigned)

References

Details

Taskcluster currently doesn't use either of these groups to control scopes. We should either remove them, or make them useful (vpn_treestatus should probably be removed in any case).

If we implement Bug 1613551, I think that we may want more fine-grained permissions than having a single LDAP group allows, and that we can grant things in taskcluster rather than LDAP.

Component: Applications: TreeStatus → General
Severity: normal → S3

vpn_treestatus does not exist, deleted in bug 1502186.
That same bug has the history of how treestatus came to be.

If this makes progress, I'm interested as LDAP admin.

Summary: Consider removing treestatus and vpn_treestatus LDAP groups. → Consider removing treestatus LDAP group

As far as I can tell the treestatus group is unused, and the old treestatus app was replaced (bug 1771695); moving over to IT/ldap for the cleanup.
(The new lando-based treestatus uses https://people.mozilla.org/a/treestatus_users/)

Assignee: nobody → infra
Component: General → Infrastructure: LDAP
Product: Release Engineering → Infrastructure & Operations
Summary: Consider removing treestatus LDAP group → Remove treestatus LDAP group

Request makes sense, took a backup, LDAP group treestatus deleted.
Give a yell and make some notes if we need a rollback.

See Also: → 1903226
Status: NEW → RESOLVED
Closed: 2 months ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.