#101

GitHub access management based on team membership

Openjasonappahopened 1mo ago

some work towards this happened in https://github.com/Comet-Robotics/club-manager/tree/github-auth a couple years ago

Probably worth revisiting that code but also, we really need to plan out what we actually want this to do before jumping into code

The way I see it, people should be able to use OAuth to link their GitHub user with their Club Manager user. Then, based on their membership of a given project as a member, team lead, or project manager, they should be invited to the GitHub organization and added to specific GitHub teams that are linked to the Project and Team entities. Then all repo-specific access control happens within the team, so no-one should be directly added to repos.

Then, whenever they are removed from those projects or teams, or whenever they are no longer members, we automatically remove them from those GitHub teams, revoking their access automatically. I'm still iffy on whether we should remove them from the GitHub organization. I think it's kind of nice to keep them in the organization, but maybe not necessarily have them have any actual writing permissions with the organization. I actually don't recall what permissions you get as just a member of an organization by default.

this also requires that the admin interfaces that support adding people to projects and teams and giving them different permissions are actually solid. I think it works, but I haven't touched it in a hot minute so not sure if its any good

not super high priority for now but would be nice to get to some time soon

Activity

0

No activity yet.