On Thu, Apr 06, 2023 at 12:22:59PM -0400, Ben Cotton wrote: > On Wed, Apr 5, 2023 at 6:05 PM Pedro Moura <pmoura@xxxxxxxxxx> wrote: > > > > Instead of users having to SSH and create a .planet file to add their blogs, the idea would be simply add their blogs to Fedora Accounts. The fields in Fedora Accounts should be available in FasJSON, and we are using this API to create the files for each planet so Pluto can build them. > > That seems like a nice improvement in usability. > > > Is it the best approach? Are those planets still being used? Also, is it okay to let users freely add some link that will appear in Fedora planet? Maybe creating a group for people that wish to add their blog on Fedora Planet would help to improve the security about the last one? > > I don't think an additional group is necessary, but we should probably > tie it to agreeing to the FPCA at a minimum. Maybe we can require > membership in at least one group instead of adding a specific group? > We have historically had the occasional problem with inappropriate > content in Planet, but generally it hasn't been an issue. We can > address those issues as they come up. Oh, I forgot to reply to this part, but currently planet feeds are taken from ~/.planet files on fedorapeople.org. So, in order to do that you have to have access there (ie, be in more than one non cla group). We should definitely keep this in the new setup. The ipa group "contributor" I think exposes this. So, we should make sure only people in that group are enabled. Finally, yeah, it might be good to have a blocklist file in case we need to block someone, but I guess we could just remove their feed from their account? but then they could add it back in, so... kevin
Attachment:
signature.asc
Description: PGP signature
_______________________________________________ infrastructure mailing list -- infrastructure@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to infrastructure-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/infrastructure@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
