[Zope-dev] A Tale of Two Repositories

[Tres Seaver]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 05/15/2015 07:07 AM, Maurits van Rees wrote:
> Tres Seaver schreef op 14-05-15 om 21:14:
>> Contributor Workflow:  Github -----------------------------
>> 
>> Github-based contributors will follow normal Github workflow
>> patterns:
>> 
>> - Fork the repository of interest via the Github UI.
> 
> If they have contributor acccess to the original repository, they can
> of course create a branch in this original github repository.

I class "contributor" as distinct from "maintainer", based on exactly
those rights, although we might want to adopt a pattern where even
maintainers function as though they were contributors, submitting pull
requests for review by another maintainer.

> I was going to say: "the same is true for Launchpad," but on Launchpad
>  we should of course not do any manual changes to the original 
> repository, because it is meant to be only touched by the automatic 
> synchronisation.

I don't have enough Git-fu to work out how to automate two-way
synchronization, which is why I described having the LP repository be a
read-only mirror.

>> The Launchpad repository will be synched automatically, whether by
>> the cron job or by the built-in Launchpad mirroring.
> 
> Does anyone know if we can make the Launchpad repository read-only 
> except for the synchronization?  This would prevent accidental
> commits. Well, I guess the access rights can be tweaked.  If the repo
> can only be written to by one Zope Foundation or CMF account, this
> would prevent accidental commits by individual contributors.

If Launchpad supports it, then having the commit rights restricted to the
mirroring process would be great.

> Sounds good to me.
> 


Tres.
- -- 
===================================================================
Tres Seaver          +1 540-429-0999          tseaver at palladion.com
Palladion Software   "Excellence by Design"    http://palladion.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=RY1y
-----END PGP SIGNATURE-----