feat: allow external committee members to duplicate perms #570

Open
thesuperRL wants to merge 1 commit from external-access-grants into main
Owner

now @gostmeaper can larp as a tech lead fr fr

now @gostmeaper can larp as a tech lead fr fr
feat: allow external committee members to duplicate perms
Some checks failed
CI / build (pull_request) Has been skipped
atlantis/pre_workflow_hook: Install local-only OpenTofu providers succeeded.
nixbot/nix-eval evaluation succeeded in 0s (1 warning)
nixbot/nix-build 0 attributes built
kennel/build build succeeded
kennel/deploy deployment healthy
Validate / Governance (pull_request_target) Failing after 2m53s
CI / check-1 (pull_request) Failing after 3m54s
CI / check (pull_request) Failing after 0s
a302cf126c
now @gostmeaper can larp as a tech lead fr fr

Kennel Deployments

Service URL
docs https://governance-docs-pr-570.scottylabs.net

Last updated for commit a302cf1.

<!-- kennel-deployment --> ### Kennel Deployments | Service | URL | | --- | --- | | docs | https://governance-docs-pr-570.scottylabs.net | Last updated for commit `a302cf1`.
@ -0,0 +1,30 @@
# External Access
Some people outside the Tech Committee need a team's or project's permissions without being part of that team. [`data/external.yaml`](https://git.cmu.dev/ScottyLabs/governance/src/branch/main/data/external.yaml) grants them a role they already would have had, rather than duplicating it:
Owner

Some people outside the Tech Committee need a team's or project's permissions without being part of that team.

I think this should never be the case, this whole feature is just opening the door to creating exceptions to tech's governance

For example, since labrador's head of onboarding and documentation requires lead-level access to devops resources, they should just be listed as a devops lead

grants them a role they already would have had, rather than duplicating it:

there is no duplication if they're just added directly

> Some people outside the Tech Committee need a team's or project's permissions without being part of that team. I think this should never be the case, this whole feature is just opening the door to creating exceptions to tech's governance For example, since labrador's head of onboarding and documentation requires lead-level access to devops resources, they should just be listed as a devops lead > grants them a role they already would have had, rather than duplicating it: there is no duplication if they're just added directly
Some checks failed
CI / build (pull_request) Has been skipped
atlantis/pre_workflow_hook: Install local-only OpenTofu providers succeeded.
nixbot/nix-eval evaluation succeeded in 0s (1 warning)
nixbot/nix-build 0 attributes built
kennel/build build succeeded
kennel/deploy deployment healthy
Validate / Governance (pull_request_target) Failing after 2m53s
CI / check-1 (pull_request) Failing after 3m54s
CI / check (pull_request) Failing after 0s
This pull request doesn't have enough approvals yet. 0 of 1 approvals granted.
This branch is out-of-date with the base branch
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin external-access-grants:external-access-grants
git switch external-access-grants
Sign in to join this conversation.
No description provided.