On Mon, 17 Aug 2020 at 13:17, Frantisek Zatloukal <fzatlouk@xxxxxxxxxx> wrote: > > > > On Mon, Aug 17, 2020 at 4:36 PM Pierre-Yves Chibon <pingou@xxxxxxxxxxxx> wrote: >> >> What about email addresses? I figure they are needed for the bugzilla >> integration, no? > > > No, we don't store/need any email addresses. We store the package list for username and then ask bugzilla for bugs per package. > >> >> >> >> (which raises a question: how do you handle the bugzilla email overrides we >> currently have in place? ie: people who do not use the same email address in FAS >> and in bugzilla, for example to be able to use their @fedoraproject.org alias in >> bugzilla). > > > We get package list from this json and pair it with FAS usernames: https://src.fedoraproject.org/extras/pagure_owner_alias.json (+group packages from pagure api endpoint which is also username based). > > So we technically don't care about emails at all. I think we need to be clearer than 'email address'. We need to know if the app connects a 'user' with a 'data'. If it does then it probably falls under something we need to track to either delete regularly, alert them when that system gets hacked, etc etc etc. -- Stephen J Smoogen. _______________________________________________ infrastructure mailing list -- infrastructure@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to infrastructure-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/infrastructure@xxxxxxxxxxxxxxxxxxxxxxx
