provide LP developers full access to QAS/Staging feature flags

Bug #790025 reported by Steve McInerney
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Launchpad itself
Fix Released
High
Unassigned

Bug Description

Currently LP Devs must losa pingaling to modify/add feature rules in staging/qas.
Given we now have an automatic audit/change log for those rules, it may be appropriate to have some mechanism in the restore process that can set the Devs to have full rules access - for staging/qas only.

Along the lines of some SQL that could be run that toggles privilege to a specific group - in this case, LP devs.

Related branches

Revision history for this message
Robert Collins (lifeless) wrote :

Theres no current policy knob for who-can-edit other than 'in ~admin' which would be inappropriate.

What we could do is add one and then put ~launchpad in it when desired.

One way would be to create a different group to ~admins which controls access and then put ~admin in that. The sync to qastaging would make an API call post-sync to add ~launchpad.

Another would be to explicitly model an access list of some sort.

Changed in launchpad:
status: New → Triaged
importance: Undecided → High
Martin Pool (mbp)
tags: added: canonical-losa-lp feature feature-flags
Revision history for this message
Jürgen Gmach (jugmac00) wrote :

Launchpad devs already have full access to feature rules, not only on staging, but also on production.

Changed in launchpad:
status: Triaged → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.