353463 - Rewrite Despot for new LDAP infrastructure and multiple SCM support

Status: RESOLVED WONTFIX

(Webtools Graveyard :: Despot, defect)

Description

[Reed Loden [:reed]]

As part of the great change to LDAP, Despot needs to be able to authenticate against LDAP and read/write group access (cvs, cvs-www, etc.) from LDAP. Partitions will still be saved in mysql, however.

It needs to be decided what information will remain in mysql and what information will be migrated to LDAP.

Basically, rewrite Despot with cool new features!

Features justdave wants to see:
* all UI templatized
* cookie auth instead of submitted the user/pass with each page load
* intuitive search for users by email or name, with click to view/edit when you find them
* ability to add/delete/rename repositories
* ajax'ified
* Template Toolkit

More thoughts to come.

Comment 1

[Axel Hecht [:Pike]]

I expect that we'd need to this to migrate l10n over to hg, adding dependency to bug 433846.

Comment 2

[Reed Loden [:reed]]

Would be a good webdev intern project for the summer... ;)

Comment 3

[Dave Miller [:justdave]]

OK, so we have new specs for this project, and it's a two-parter now.

1) Remove all user management functionality from Despot.  It should only manage modules and who can commit where.  It should http auth against LDAP instead of using its internal database.  It should be LDAP-aware for determining which users exist for mapping access to modules.

2) All user management functions go to LDAP.  LDAP controls cvs account enable/disable, and controls group access for cvs_mozsrc, cvs_www, cvs_l10n, and cvs_despot (the latter being the admin privs in despot).  These items would be controlled in the existing ldap/manage app, rather than in despot.

Or is it even worth it?  Does anyone actually use CVS for anything still?

Comment 4

[Dave Miller [:justdave]]

I should point out that CVS is the ONLY source repository we have that *isn't* controlled by LDAP right now.

Comment 5

[Gervase Markham [:gerv]]

justdave: despot no longer manages module ownership; that is officially done by https://wiki.mozilla.org/Modules .

I'm not seeing the value of a new Despot any more...

Gerv

Comment 6

[:Gavin Sharp [email: [e-mail]]]

It still controls access to restricted CVS modules, but yeah, it's mostly dead.

Comment 7

[Rob Tucker [:rtucker]]

despot is dead AFAIK
CVS is dead. Going to close this out as a wontfix.
Please reopen if necessary.