#12180 Grant yselkowitz edit-tag permission for eln-build
Closed: Fixed by kevin. Opened by sgallagh.

  • Describe the issue
    Grant FAS user @yselkowitz permission to edit the eln-build tag. This is so he can bump the %eln macro version when needed for triggering full or targeted mass-rebuilds in Fedora ELN.

  • When do you need this? (YYYY/MM/DD)
    2024-08-30

  • When is this no longer needed or useful? (YYYY/MM/DD)
    Indeterminate

  • If we cannot complete your request, what is the impact?

Yaakov will need to bother someone else with this permission to perform the modifications.


No objection to doing this, but... it seems like we are relying on the 'tag' permission currently, but thats pretty wide.

We do seem to have a 'eln' permission, but aren't using it for anything?

So, how about we set eln tag (and thus eln-build that inherits from it) to need eln perm (we may need to add autosign or other automated things to this permission).

Metadata Update from @jnsamyak:
- Issue tagged with: low-trouble, medium-gain, ops

The specific set of privileges that @yselkowitz needs are:

  • modify rpm.macro.eln
  • modify rpm.macro.rhel
  • Manually tag packages into eln-updates-candidate (in the event that ELNBuildSync has crashed and left packages in a side-tag)
  • Manually tag (and untag) packages into eln in case the ELN->CentOS Stream sync needs to be retriggered

I think that is everything.

Metadata Update from @kevin:
- Issue assigned to kevin

ok, I went and looked and my former theory is just wrong. tag perm is needed here currently as far as I can tell.

So I have granted yselkowitz tag perms. Please use your powers wisely!

Metadata Update from @kevin:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

Metadata