Re: Members of the system administrator team, and the web master team

[Davi Leal]

Neal E. Coombes wrote:
> I'd like to note to Alfred that Davi does not have complete power.  I
> control the domain name

> Doesn't someone else control the certificate or something?

MJ bought and payed the HTTPS certificate. I installed it at the gnuherds 
machine.

We will take the first opportunity to pay him such money.  We are waiting a 
little more to try to avoid paying transfer commissions.


> Davi: If you'd like to add me to the project as an administrator, I'd be
> happy to do my usual hands-off participation and just be there to oust you
> if necessary ;)

The gnuherds machine is physically hosted at the FSF servers. So users can 
have confidence about the physical access security.


If you control the gnuherds.org domain name and at the same time you have 
access to the machine you could get the software and the users data and 
install it at another machine controlled by you, locking so all users under 
your control.

IMHO it is good you control the gnuherds.org domain name. However it would not 
be good if you have access to the users data too.


Right now, the FSF sysadmins and me are who have access via ssh to the project 
data base and the webapp at gnuherds.org.  IMHO it would be good that one 
person more of the GNU Herds users have such access, not only me.

At the same time, IMHO, somebody more should have control over the 
gnuherds.org domain name.


The goal should be avoid full control on the same hands. That could allow to 
fork and lock the project.  So nobody should have access to the data base and 
control over the gnuherds.org domain at the same time.


Proposal:

    Physical access:
      * FSF sysadmin staff.

    Control over the gnuherds.org domain name:
      * Neal
      * Nicodemo  (add Nicodemo)

    Control over the data base and webapp at production, HTTPS cert included:
      * Federico  (add Federico)
      * Davi

  If it is needed we could review such power sharing at any time.



What do you think?