Tim Rizzi (3c6b3dcc) at 16 Mar 18:51

Tim Rizzi (feda29f0) at 16 Mar 18:42

Thanks @rchanila and @bonnie-tsang, I made that change and updated the docs and the pot file. Please take a look.

Tim Rizzi (477444ad) at 16 Mar 18:23

Tim Rizzi (4173c51c) at 16 Mar 16:50

@s_murray Can you please do the backend maintainer review for this MR? Thanks!

I spun up a quick prototype for authz. Video walkthrough here: https://youtu.be/sxCXk0FUhBI\
Prototype here: https://unified-artifact-managment-965acd.gitlab.io/members-roles\
Food for thought:

• Does the org-level → repo-level inheritance model feel intuitive?
• Is the "override can only elevate" behavior clear, or will users expect to be able to reduce access at the repo level?
• Is the access rules "restrict only" model clear from the UI, or do users need more guidance?
• Should the effective permissions matrix be shown proactively (always visible), or only on demand?
• For the empty-roles case (disabling an action entirely), is the red warning sufficient, or should there be a confirmation step?
• Where should repo-level access rules live — in the access modal (current), in a dedicated repo settings page, or both?

@10io @bonnie-tsang @alyssatrinh

I spun up a quick prototype for authz. Video walkthrough here: https://youtu.be/sxCXk0FUhBI\
Prototype here: https://unified-artifact-managment-965acd.gitlab.io/members-roles\
Food for thought:

• Does the org-level → repo-level inheritance model feel intuitive?
• Is the "override can only elevate" behavior clear, or will users expect to be able to reduce access at the repo level?
• Is the access rules "restrict only" model clear from the UI, or do users need more guidance?
• Should the effective permissions matrix be shown proactively (always visible), or only on demand?
• For the empty-roles case (disabling an action entirely), is the red warning sufficient, or should there be a confirmation step?
• Where should repo-level access rules live — in the access modal (current), in a dedicated repo settings page, or both?

Tim Rizzi (9fca0010) at 13 Mar 18:22

@jeanvdw Can you please do the backend review for this MR?

Tim Rizzi (f21e2355) at 13 Mar 15:27

I have an MR that I opened and have submitted it for the first round of review.

Update: I have an MR in progress that is in review. Hoping this will get done in 18.11.

Update: I have an MR in progress that is in review. Hoping this will get done in 18.11.

https://gitlab.com/khornergit - FYI - I opened !227172 to update release evidence to include packages. I just submitted it for the first round of review. I'm hoping to get this done in 18.11

Tim Rizzi (60290aee) at 13 Mar 15:02

@tskorupa-gl Can you please do the backend review for this MR to add Terraform modules to the package protection rules? Thanks!

Thanks @sylviashen! @z_painter can you set this to merge?