946036 - remove inactive members from "build" team

Status: RESOLVED FIXED

(bugzilla.mozilla.org :: Administration, task)

Description

[John O'Duinn [:joduinn] (please use "needinfo?" flag)]

The "build" team in bugzilla is used by RelEng for tracking access to security bugs, and for partner-specific-private information. As part of an audit, we found the following people are still members in this restricted group, and therefore these restricted bugs, even though they are no longer active members of RelEng (or in some cases, even Mozilla community).

[e-mail] alice nodelman [:alice] [:anode]
[e-mail] Benjamin Smedberg [:bsmedberg]
[e-mail] Carsten Book [:Tomcat]
[e-mail] Dustin J. Mitchell [:dustin]
[e-mail] John Ford [:jhford]
[e-mail] Lukas Blakk [:lsblakk]
[e-mail] Marc Jessome[:mjessome]
[e-mail] Mikeal Rogers [:mikeal] 
[e-mail] J. Paul Reed [:preed]
[e-mail] Rob Campbell [:rc] (:robcee)
[e-mail] Robert Helmer [:rhelmer]
[e-mail] Syed Albiz [:salbiz]

I've cc'd them all on this bug. If any of these users have a valid reason to continue to need access to these restricted "build" bugs, please elaborate and we'll leave your access as-is. Otherwise, we should remove unused access to maintain security.

Comment 1

[Lukas Blakk [:lsblakk] use ?needinfo]

I'm fine with being CC'd on bugs as they come up if they need Release Managers involved.

Comment 2

[:glob ✱]

joduinn - note you have the ability to add or remove people from the build group.  left-click on a user and select 'edit', or find their account via https://bugzilla.mozilla.org/editusers.cgi

> [e-mail] alice nodelman [:alice] [:anode]

anode left mozilla a while ago, and her account is currently disabled.  i've removed her from the build group to remove her from your radar.

Comment 3

[Benjamin Smedberg]

I don't know why I was on this in the first place, but if this has to do with partner-build engineering, I probably still need to be able to see those (and I'm in core-security already, so I don't expect there extra risk involved).

Comment 4

[Carsten Book [:Tomcat]]

(In reply to John O'Duinn [:joduinn] from comment #0)
> [e-mail] Carsten Book [:Tomcat]

fine by me for removing (in case this is a left over when i was in releng) - as long it does not affect my sheriffduties (don't know if i'm on that list for this part or whatever)

Comment 5

[Dustin J. Mitchell [:dustin] (he/him)]

I don't know that I've ever seen a bug with this group on it, so I'm fine with being removed and copied on a need-to-know basis.

Comment 6

[hwine]

(In reply to Byron Jones ‹:glob› from comment #2)
> joduinn - note you have the ability to add or remove people from the build
> group.  left-click on a user and select 'edit', or find their account via
> https://bugzilla.mozilla.org/editusers.cgi

This may not work as expected -- see new bug 946246 where adding doesn't seem to work. That's how we stumbled on this info :/

Comment 7

[Chris Cooper [:coop] (he/him)]

I just removed everyone except the current team.