Commit 41877dbe authored by sajolida's avatar sajolida
Browse files

Merge remote-tracking branch 'origin/master'

parents 81efc417 c201c58c
...@@ -436,6 +436,22 @@ instance"]]. ...@@ -436,6 +436,22 @@ instance"]].
The Tails [[system administrators|working_together/roles/sysadmins]] The Tails [[system administrators|working_together/roles/sysadmins]]
administrate this GitLab instance. administrate this GitLab instance.
## Configuration of GitLab
The configuration of our GitLab instance lives in the private [[!tails_gitlab
tails/gitlab-config]] GitLab project.
If you have access to this project, you can propose configuration changes:
push a topic branch and submit a merge request.
This can be useful, for example:
- to modify group membership when someone joins or leaves a team
- to propose new [[!tails_gitlab groups/tails/-/labels desc="group labels"]]
shared by all our GitLab projects
- to propose a new project under the `tails/` namespace, ensuring our common
project settings & permission model are applied
<a id="access-control"></a> <a id="access-control"></a>
## Access control ## Access control
...@@ -471,11 +487,13 @@ administrate this GitLab instance. ...@@ -471,11 +487,13 @@ administrate this GitLab instance.
### Subjects ### Subjects
- An _admin_ can do anything that other roles can, and: - An _admin_:
- can delete issues - can configure GitLab
- can edit team membership - As a consequence, an admin can grant themselves
any permission they want if an emergency requires it;
in other situations, better follow due process to request
such status or permissions :)
- MUST comply with our "Level 3" security policy - MUST comply with our "Level 3" security policy
- can view issues that contain particularly sensitive data
- A _committer_: - A _committer_:
- can push and force-push to any ref in the canonical Git repo, - can push and force-push to any ref in the canonical Git repo,
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment