transif user in packager group

[Mike McGrath]

On Tue, 28 Jul 2009, Toshio Kuratomi wrote:

> Today we added the transif user to the packager group because transifex
> lost the ability to add translations for comps.  At the moment, this
> doesn't affect much -- packager group only gives you the ability to
> commit to comps and what packages you are given explicit rights to.
> However, it may become bigger in the future since we may allow people to
> specify that anyone in packager can commit to their packages.
>
> transif's last commit to the comps files was around the 17th of July.
> If anyone can recall some action or config change that they might have
> performed that would have changed whether transif could commit to comps
> between 17th of July and today or can think of a better way to give
> transif access to the comps cvs repo please speak up!  it would be
> better long-term if transif was not in the packager group.
>
> The only solution we've come up with that doesn't use the packager group
> so far requires that we do two things:
> 1) add cvs acls for transif to commit to comps.
> 2) set filesystem acls so transif can commit to comps.
>
> Doing #2 isn't that great an idea as it's a one-off doing something not
> readily apparent (we don't use fs acls anywhere else in cvs).  But if it
> could be puppet managed it might not be too bad.
>

2 is the more secure option.  I want to find out what happened here.

	-Mike