737461 - be able to grant permissions to edit only rules on certain channels/versions/whatever

Status: RESOLVED WONTFIX

(Release Engineering Graveyard :: Applications: Balrog (backend), defect, P4)

Description

[Chris AtLee [:catlee]]

use case is to allow folks like khuey or other trusted sheriffs disable updates on nightly channel.

Comment 1

[[e-mail] (:bhearsum)]

mass component change

Comment 2

[[e-mail] (:bhearsum)]

Chris, Nick and I talked about the use case from comment #0 yesterday. We thought that this might be better (and more simply) implemented as a pass-through service, similar to how we allow nightly build retriggering through self serve. What do you think about that?

Comment 3

[Chris AtLee [:catlee]]

Yeah, that's certainly a possibility. Is it simpler to write a small app that does very specific operations with the Balrog API rather than have finer grain permissions?

Comment 4

[[e-mail] (:bhearsum)]

(In reply to Chris AtLee [:catlee] from comment #3)
> Yeah, that's certainly a possibility. Is it simpler to write a small app
> that does very specific operations with the Balrog API rather than have
> finer grain permissions?

The backend bits probably aren't _too_ hard, but I have no idea what to do in the UI. We'd have to start customizing the UI based on what permissions you have, which seems like overkill. I'm not entirely opposed to it, but it's definitely more work.

We need bug 721333 before we can implement the idea in comment #2, but we need that for release support anyways...

Comment 5

[[e-mail] (:bhearsum)]

I think the pass-through approach (via self serve, or whereever) is almost certainly the better approach. We're even leaning towards that for things such as letting RelMan ship releases.