administration of who is a team administrator is inconsistent and lacking documentation

Bug #102180 reported by Andrew Bennetts
34
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Launchpad itself
Fix Released
Low
William Grant

Bug Description

I am an administrator of the twisted-dev team. I wanted to add another user as an administrator, but can't find any option to do so. I suspect this is because making administrators is something only the team owner can do (after all, if an administrator can't, then that's the only other reasonable explanation), but I cannot find any explanation of this in the UI, so I am left to guess at how team administration actually works.

I even (as an afterthought while filing this bug) looked in the help tabs on various pages for teams, but they all said "Sorry, help isn’t available for this page."

I would expect:

 * https://launchpad.net/~twisted-dev/+addmember to tell me that I can only add ordinary "Approved" members, and
 * https://launchpad.net/~twisted-dev/+member/jml to tell me who (i.e. what role, and possibly also the concrete person that has that role) is able to change the "administrator" flag on that page.

Related branches

Changed in launchpad:
importance: Undecided → Medium
status: Unconfirmed → Confirmed
Revision history for this message
Brad Crittenden (bac) wrote :

I also find it odd that an administrator cannot promote other members to be administrators BUT can take away administrator privileges from fellow admins.

Revision history for this message
Guilherme Salgado (salgado) wrote : Re: [Bug 102180] Re: Unclear who can add adminstrators to teams

IIRC, the reason why we allow administrators to demote fellow admins is
so that the team doesn't depend on a single person (the owner) to demote
an admin that starts misbehaving badly.

I agree this is confusing as it's not explained anywhere and I'm not sure
this has ever been of any use to a team, so it may be better to either
allow or deny team admins to promote /and/ demote members.

Revision history for this message
Matthew Paul Thomas (mpt) wrote : Re: Unclear who can add adminstrators to teams

If an admin can demote fellow admins, then so could a misbehaving admin. :-)

If you wanted to protect against admin misbehavior, you could require signoff from N admins to demote another admin, where N > sqrt(total number of admins).

Revision history for this message
Curtis Hovey (sinzui) wrote : Re: Unclear who can add administrators to teams

Since the owner of a team can be another team (there are admins), I believe any admin should be permitted to promote a member to the role of admin.

Changed in launchpad-registry:
importance: Medium → Low
status: Confirmed → Triaged
Barry Warsaw (barry)
summary: - Unclear who can add administrators to teams
+ Allow team admins to promote other admins
Revision history for this message
Michael Hudson-Doyle (mwhudson) wrote : Re: Allow team admins to promote other admins

After this is done, what's the difference between an admin and the owner?

Revision history for this message
Curtis Hovey (sinzui) wrote : Re: [Bug 102180] Re: Allow team admins to promote other admins

On Wed, 2009-08-26 at 04:06 +0000, Michael Hudson wrote:
> After this is done, what's the difference between an admin and the
> owner?

The Owner can edit the team details like descriptions, icons, etc.., the
Admins can only change membership.
--

__C U R T I S C. H O V E Y_______
Guilty of stealing everything I am.

Revision history for this message
William Grant (wgrant) wrote : Re: Allow team admins to promote other admins

That's not correct. I can edit all details of a team of which I am only an admin. AFAICT, once admins can make others into admins, the only extra privilege will be the ability to change the owner.

However, the ownership role is still very useful for giving ultimate control of a team to somebody who is not a member.

Curtis Hovey (sinzui)
tags: added: teams
removed: registry
Revision history for this message
Robert Collins (lifeless) wrote :

So the question is, should admins be able to promote (and demote) admins, or should only owners be able to make admins.

The original report wasn't a request for admins to promote admins, but for clarity about who can in the UI.

For now, I don't think we have any evidence suggesting our decision that owners choose admins, and admins do all day-to-day was wrong.

If anything, I think we possibly want clearer separation - e.g. team renaming is possibly an owner-only thing; admin promotion/demotion owner-only etc.

I'm going to put this back towards being a statement of confusing UI rather than a possibly mistaken change in admin-management rules.

Revision history for this message
Robert Collins (lifeless) wrote :

(Oh, and responding to some of the other analysis - owners can be teams, so requiring owners to make changes to admins does not imply depending on one person only to maintain the admins of the team). The asymmetry between promoting and demoting should be fixed. We could allow some configuration here but I think it isn't needed: rogue admins are rare; launchpad support can intervene to remove a rogue admin in extremis.

summary: - Allow team admins to promote other admins
+ administration of who is a team administrator is inconsistent and
+ lacking documentation
Revision history for this message
Launchpad QA Bot (lpqabot) wrote :
Changed in launchpad:
assignee: nobody → William Grant (wgrant)
tags: added: qa-needstesting
Changed in launchpad:
status: Triaged → Fix Committed
William Grant (wgrant)
tags: added: qa-ok
removed: qa-needstesting
Steve Kowalik (stevenk)
Changed in launchpad:
status: Fix Committed → Fix Released
Curtis Hovey (sinzui)
tags: added: disclosure
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.