Problems
Team access issues:
- When a contributor creates a new project in the
backdrop-contrib group, our Teams are not granted adequate permissions.
- Lots of legacy repositories had never had team permissions set in the first place.
Solution
The borg_github module could be used to set permissions on repositories in backdrop-contrib.
Let's do the following
Every Time we create a new repository or release a new version of the project we should set up our teams as follows:
- Set the
Authors team to have the role triage on the project
- Set the
Bug Squad team to have the role write on the project
- Set the
Security team to have the role admin on the project
If possible, we should also add the maintainer(s) as admin.
In the code: hook_githubapi_payload() can be used on the create and release events to set these permissions.