Mattia Rizzolo <mat...@debian.org> writes: > On Wed, Dec 27, 2017 at 10:02:06AM +0100, Ole Streicher wrote: >> Mattia Rizzolo <mat...@debian.org> writes: >> > On Wed, Dec 27, 2017 at 01:35:50AM +0100, Philip Rinn wrote: >> >> Is it true (and intended) that -guest users can't create projects >> >> within teams/groups they are member of? Or am I missing something? [I >> >> was not able to create a project within the Debian Science Team] >> > >> > As Anton noted, you need to be a "master" in that group. The difference >> > between "master" and "developer" in groups is only that masters can >> > create projects. >> >> There is another important difference: masters can add new team >> members. Which means that we actually loose any control on the team >> members if we grant "master" to all. For collab-maint, since all DDs are >> masters there, anyone can actually decide to grant "master" to any >> non-DD on the base of *personal* trust (right?). > > AFAIK, that's only true for projects. > "masters" can't add people to teams, but they can add new members to > single projects.
Are you sure? I am a Debian Science "master", and I get automated requests to add people to Debian Science. I couldn't check it, however, since someone else was always quicker :-) > IMHO, that's fine pretty much everywhere: if you trust somebody to > create a repository, you probably also trust them to allow somebody > else to work on it (and take the right decision about which level of > permission to grant to the new collaborator). If that is the case, yes. That would however mean that all maintainers should be "Owners", right? Best Ole