Page MenuHomePhabricator

Support "Bind to External Thing" to define project membership
Open, NormalPublic

Assigned To
Authored By
hach-que
Oct 17 2013, 8:41 PM
Tags
Referenced Files
F1117016: images.jpg
Feb 17 2016, 9:08 PM
F1115522: 000000-0.png
Feb 17 2016, 3:29 AM
Tokens
"Like" token, awarded by jcarrillo7."Like" token, awarded by stevex."Like" token, awarded by rencris."Yellow Medal" token, awarded by spawnlt."Like" token, awarded by kislinsk."Like" token, awarded by amartin33."Like" token, awarded by rftfaria."Like" token, awarded by Robmaister."Like" token, awarded by psychomieze."Like" token, awarded by alexandros.tsourakis."Like" token, awarded by leonardo.furio."Like" token, awarded by seitzbg."Like" token, awarded by JohnTheodore."Like" token, awarded by uaoleg."Like" token, awarded by chasemp."Like" token, awarded by bigo."Evil Spooky Haunted Tree" token, awarded by frgtn."Like" token, awarded by tristan.

Description

Follow up / feedback from T603.

With regards to custom policies, "LDAP group" would be a really nice one to have; it would certainly help at our workplace. Our scenario is to prevent non-developers from viewing the source code repository in Diffusion.

Related Objects

Event Timeline

There are a very large number of changes, so older changes are hidden. Show Older Changes

This is not blocked, but large and not adjacent to other prioritized work. I've included it in "Projects v3" (T9378).

eadler added a project: Restricted Project.Feb 14 2016, 6:44 PM
eadler moved this task from Restricted Project Column to Restricted Project Column on the Restricted Project board.
eadler moved this task from Restricted Project Column to Restricted Project Column on the Restricted Project board.

This is a highly valuable feature for my use case as well

eadler edited projects, added Restricted Project; removed Restricted Project.Feb 26 2016, 8:01 PM

Is the outcome of this task likely to be select a source for a given project where source might be manual, or ldap, or something custom?
Would it be possible for the source to not only serve as an adapter but also create/remove projects on-demand?

Is the outcome of this task likely to be select a source for a given project where source might be manual, or ldap, or something custom?

Yes.

Would it be possible for the source to not only serve as an adapter but also create/remove projects on-demand?

I don't currently plan to support that; I don't think we've seen any use cases for it. You could do it yourself with project.edit and a little glue.

eadler moved this task from Restricted Project Column to Restricted Project Column on the Restricted Project board.Mar 18 2016, 4:48 PM
eadler edited projects, added Restricted Project; removed Restricted Project.Apr 10 2016, 12:44 AM
eadler edited projects, added Restricted Project; removed Restricted Project.
eadler edited projects, added Restricted Project; removed Restricted Project.Apr 15 2016, 3:56 PM
cburroughs moved this task from Restricted Project Column to Restricted Project Column on the Restricted Project board.Apr 20 2016, 3:56 PM

I think this was building up toward T10939, and the actual solutions we're looking at there probably don't involve this.

@epriestley can you explain how this was building up toward T10939? That one deals with automatically adding reviewers while this enables project membership (and hence policies) to be based on a predefined source of truth at most companies (LDAP).

This was moved into the prioritization queue by a particular customer that was interested in defining Owners via Projects via external sync.

My understanding is that LDAP sources were not their primary interest -- rather, a custom OWNERS-defined source was. T10939 describes better ways forward for that customer, so this task no longer has external prioritization driving it. Consequently, I've removed the Prioritized tag.

Most users interested in this task want LDAP sync, and that's the primary use case this task imagines, but this task was just a means to an end for the customer in question.

@epriestley thanks for the extra context. Makes sense now haha. Sad to see this get deprioritized though.

eadler moved this task from Restricted Project Column to Restricted Project Column on the Restricted Project board.Jun 6 2016, 5:34 PM
eadler moved this task from Restricted Project Column to Restricted Project Column on the Restricted Project board.Jul 4 2016, 9:05 PM