1838603 - require permission to annotate task/classify job/failures

Status: NEW

(Tree Management :: Treeherder, task)

Description

[Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)]

People can log into Treeherder with SSO, Github, Gmail and Firefox Accounts. This directly enables them to classify tasks, e.g. with a bug number as intermittent or as fixed by commit etc.

Very rarely a new, unknown, random user logs in and does some classifications which are incorrect, e.g. for all tasks for a push, even successful ones. This interferes with the work of the code sheriffs because failed tasks get classified incorrectly and distorts analytics.

The ability to classify could require an additional permission, e.g. be bound to LDAP access. Permissions or their lack during onboarding of new employees or volunteers should be taken into account.