X Tutup
The Wayback Machine - https://web.archive.org/web/20200909025713/https://github.com/nodejs/github-bot/issues/200
Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Moderation Team features #200

Open
Trott opened this issue Aug 13, 2018 · 2 comments
Open

Moderation Team features #200

Trott opened this issue Aug 13, 2018 · 2 comments

Comments

@Trott
Copy link
Member

@Trott Trott commented Aug 13, 2018

Here are some features that might make it possible to have the Moderation Team use the GitHub bot and not have to have the Owner role in the org. All these features would be available to Moderation Team members only:

  • Org-wide search: Just passes queries directly to GitHub search and returns the results, but it logs the fact that so-and-so searched for something on such-and-such a day. The difference between using the bot search and doing search yourself would be that the bot has access to all repositories in the org while the individual user may not. Because they would be searching sensitive information, the use of the search should be logged so that someone can audit that searching is only done for moderation purposes.

  • A "give me access to this repo" feature. You can instruct the bot to add you as a Collaborator or Owner on a specific repo. Again, it's logged, and maybe time-bound.

  • The other thing the bot will need to do is be able to block and unblock folks for us.

That might be all that's needed.

/cc @nodejs/moderation

@maclover7
Copy link
Member

@maclover7 maclover7 commented Aug 14, 2018

github-bot is basically just a giant "if webhook do this" application -- would it make sense to use outgoing webhooks in the moderation team slack (I believe there is a slack for the moderation team?) as the way to interact? Or, if actions should be seen by people other than the moderation team, use comments in GitHub issues?

I can't commit to implementing this stuff myself, but I am happy to mentor/pair/review if there are moderation team members willing to work on the bot :)

@Trott
Copy link
Member Author

@Trott Trott commented Aug 14, 2018

It was pointed out by @gibfahn that the org-wide search is probably not needed. Members have read-access to nearly everything in the nodejs org without having Owner role, so default search is probably fine. That simplifies the feature set to "give me Editor access to this repo", and "block/unblock this user".

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Linked pull requests

Successfully merging a pull request may close this issue.

None yet
2 participants
You can’t perform that action at this time.
X Tutup