- Issue created by @cmlara
- 🇨🇦Canada joseph.olstad
I like this idea!
How big of a quarum do we need to get approval for this initiative?
- Status changed to Postponed
about 2 months ago 6:14pm 19 March 2025 - 🇺🇸United States drumm NY, US
I do not think this makes sense to work on before ✨ Move issues from www.drupal.org to git.drupalcode.org Postponed so we do not need to do this work twice.
- 🇺🇸United States cmlara
Linking two issues where a Project Ownership Queue Admin transferred projects that were opted in to Security Coverage to a user who did not appear to have the opt in permission required per policy.
The proposed automated gates in this issue would reduce the risk of such incidents.
- 🇮🇹Italy apaderno Brescia, 🇮🇹
the opt in permission required per policy
Apply for permission to opt into security advisory coverage → is not a policy. Please stop making false claims.
- 🇺🇸United States cmlara
Please stop making false claims.
I am referring to the following statements where users have been refused project transfer for not having the security opt in permission.
The project is covered by the security advisory policy; project moderators will not add as maintainer/co-maintainer, or project owner, somebody who cannot opt projects into security advisory coverage, as in this case.
I sometimes contact the maintainers, hoping they will reply back accepting the offer. They are the only ones who can decide to add as maintainers/co-maintainers people who cannot opt projects into security advisory coverage, though.— avpaderno
https://www.drupal.org/project/marvelous/issues/3492162#comment-16028940 💬 Offering to maintain Marvelous Theme ActiveProject moderators will not add as co-maintainers/maintainers people who cannot opt projects into security advisory coverage
— avpaderno
https://www.drupal.org/project/simple_cron/issues/3453929#comment-15651081 →@cmlara You are right. I thought I already checked that before, but I obviously got confused.
@Chandreshgiri Gauswami I have to remove you from the maintainers list, for the moment.
— avpaderno
https://www.drupal.org/project/adminer/issues/3441835#comment-15594906 💬 Offering to maintain Adminer Active - 🇮🇹Italy apaderno Brescia, 🇮🇹
In English, will does not mean certainty.
That part means people who cannot opt projects into security advisory policy cannot expect to be added as maintainer, co-maintainer, or project owners. It does not mean a project moderator will not add them as maintainers, co-maintainers, or project owners.