At present the groups defined in pit-auth are not included in
public_nonldap_groups.json.

The source file is publicly accessible, so I assume it's OK to publish
the group rosters.

Assuming it would be useful to publish the groups, there are various
ways to do this:

A: Add a new output file
B: Add a new top-level key (e.g. "pitgroups" or perhaps "pits" ;-) to
the existing file
C: Add to "groups" and add a marker - as is done for podlings - e.g. "pit": true

Also, there are also several name references (e.g. buildbot,
whimsysvn) which don't have definitions.
AIUI these are defined to SVN without using LDAP auth.
I assume such names should not be allowed as LDAP logins, so it might
be useful to extract them.
These should not be defined using option (C) above, but A or B should be OK.

Thoughts?

==

Note that locally defined groups such as podlings are effectively only
shorthand for the list of names they contain; they are not used
directly for auth. So it does not matter if they are the same as an
LDAP entry. Though defining a group such as 'clr=rubys,sebb' would be
quite confusing!

Reply via email to