On Sat, Jan 3, 2009 at 12:15 PM, Darren Reed <Darren.Reed at sun.com> wrote: > Alan Coopersmith wrote: >> ... >> Commit access has never been tied to contributor status and will >> continue to not be - it's up to each project to manage their process >> for granting direct commit access > > Project work is one thing, but what about fixing bugs?
Bugs in what? > Or do you need to sign up to the "bug project" for that? No, presumably the bug is in code that's part of a project, so you go talk to the project responsible for the code that contains the bug. > What about if I work on a project for OpenSolaris and > the project ends...do I no longer have commit rights? Commit rights are per-project, so if the project ceases to exist then there's nothing left to commit to. Rights to other projects are unaffected. > In essence, why does someone need to be a part of a > project to commit a change to OpenSolaris? (Especially > since committing to a project is a very round-about way > in which to get any change into opensolaris.) Presuming you're talking about code (in the widest sense which may include other things like documentation) then every piece of code is (or should be) part of a project. > Similarly, just because someone is working on a project > should not mean that they get commit access to opensolaris' > repo, although I suspect that would be a very rare case. There is no such thing as the opensolaris repo, only project repositories. Commit access to those repositories is handled by the relevant project. > btw, the point isn't to weight up 101 commits as being > worth more than 1, it's more complex than that... > > ...not the least of which is a security aspect: as people > are involved with OpenSolaris because of Sun and as > the right to do a putback into OpenSolaris becomes less > centered around being on staff at Sun, there may be > benefits in having some sort of activity policy... > > all it takes is one "forgotten" account that has commit privs > to be subverted by a hacker to cause a lot of strife. Which is why commit rights are managed by individual projects and should be completely separate from any aspect of community governance. -- -Peter Tribble http://www.petertribble.co.uk/ - http://ptribble.blogspot.com/
