On Sat, Jun 03, 2017 at 01:31:50PM +0100, James Hogarth wrote:
If I had the opportunity to choose the setup I think I'd lean
towards,
anyone can authenticate to the dist-git via pagure (I'd even lean towards a
full open setup via oauth etc and not fedora account only). Anyone can PR
that is authenticated. Anyone in the packager group can be added to the acl
list for a package. Use that acl list to manage who can merge the PR and
who can build in koji and issue updates in bodhi.
I think that would result in the best balance of openness whilst preserving
the importance of what it means to join the packagers group in terms of
trust that the knowledge is there for the guidelines.
+1. Not just trust for guidelines, but overall trust as well.
--
Matthew Miller
<mattdm(a)fedoraproject.org>
Fedora Project Leader