search

trustoverip / TechArch

This is the working area for the ToIP Technology Architecture specification.
10 stars 12 forks source link

Provide Access Controls To Maintainers #45

Closed andorsk closed 1 year ago

andorsk commented 1 year ago

This ticket is to determine and provide the correct access controls to the maintains of this repo, so that relevant parties are given the correct permissions to maintain the repo per their responsibilities.

This was for example, an issue in https://github.com/trustoverip/TechArch/issues/37 where I needed the access to create labels, and did not have it.

andorsk commented 1 year ago

My suggestion is we have some governance "roles":

A proposal:

  1. Maintainer <- Tagging issues, Closing issues, Creating issues, Review, and merging PRs
  2. Admins <- Has administrative power over the repo. These may include: adding issues, changing labels, updating permissions, blocking users if needed, etc.
  3. Public <- Can always create issues, set up PR ( ON A FORK ).

Nobody should be able to push directly to master IMO. We can add some branch rules to prevent a direct push to master

andorsk commented 1 year ago

Some important documentation that @talltree put up, which will help inform this is here: https://wiki.trustoverip.org/display/HOME/GitHub+Issues+Management+Process.

andorsk commented 1 year ago

TODO: Provide actions for role. Drummond: Editors: Come up with permissions for the role. Permission to work with current admin Elisa for rights.

andorsk commented 1 year ago

@elisatrevino

andorsk commented 1 year ago

Proposed resolution: Revision to the wiki page with subgroup process edits. @talltree to lead that.

a-fox commented 1 year ago

This is resolved once the Contibuting & Governance files are merged, am I right?

andorsk commented 1 year ago

@a-fox yea...I think we during the call this gets hashed out and merged.