726670 - [Press Center] Set up Press Center blog, install theme and plugins

Status: RESOLVED FIXED

(Infrastructure & Operations Graveyard :: WebOps: Other, task)

Description

[Craig Cook (:craigcook)]

We're moving towards using WordPress to manage Press Center content and have built a custom theme around the press team's needs. Some related plugins and the theme itself are still in need of infrasec review, but we're hoping to jump the gun a little bit and get the blog set up and some users added so we can begin migrating content as soon as possible.

The theme is named Press Center (how original!) and resides at http://svn.mozilla.org/projects/blog.mozilla.com/trunk/wp-content/themes/PressCenter/ so we'll need it pushed to production and activated.

The plugins we need are SitePress Multilingual CMS, WPML Translation Management, WPML String Translation, WPML Media, FeedWordPress, and CMS Tree Page View, all in SVN at http://svn.mozilla.org/projects/blog.mozilla.com/trunk/wp-content/plugins/

The new press blog will be at blog.mozilla.com/press and initial admin users should be myself (ccook at mozilla dot com) and Chrissie (cbrodigan at mozilla dot com) and we can add other users as needed.

If possible, we'd like to initially have this blog non-public and kept behind a login, either LDAP or even just a shared user/pass. At first we'll only need access internally for setup and content migration and we can make it public when the time comes.

Comment 1

[Dumitru Gherman [:dumitru]]

Craig, are those themes and plugins reviewed by infrasec?
If not, please follow https://wiki.mozilla.org/WebAppSec/Security_Review_Request.
CC'ing infrasec anyway here.

Comment 2

[Craig Cook (:craigcook)]

(In reply to Dumitru Gherman [:dumitru] from comment #1)
> Craig, are those themes and plugins reviewed by infrasec?

We've requested review of the plugins in bug 726652 but there's been no movement on there yet. I was hoping that since this blog is to initially be behind a secure login, we could get it set up even before security review is complete so we can begin migrating content before we're reading to make it live. There is no separate staging envieonment for blogs so the plan was to get everything set up and content entered behind a password, then make it public and switch everything over when the time is right. 

If we can't move ahead with the setup until infrasec signs off on everything, is there any way to move this up the review queue and get some eyes on it as soon as possible? I'll ping the other bug as well and try to get some sense of an ETA.

Comment 3

[Jake Maul [:jakem]]

The blog is created and cbrodigan is an admin. There is no theme selected, so it currently shows a blank page.

Theme and plugins still pending infrasec review.

Comment 4

[Jake Maul [:jakem]]

Anything further needed here yet? The One Mozilla theme has passed review, but my understanding is the plugins are still pending. I can add other users, for instance. Probably don't want to set the theme, or it will become visible.