Fed-Kun's army
- Joined
- Aug 16, 2018
- Messages
- 42
There apparently had been some past drama involving rouge members of TL groups defacing chapters on the mainsite that resulted in the current system for managing releases to be somewhat lacking, which apparently also had groups resort to sharing one account with upload permissions, something that's not a good security practice to say the least.
One solution that i think might be applied here (mostly in the long term future) is to provide groups with capabilities similar to to that of a simplified Git repository - only for files. Each group member (or even any non-memebr) would be able to have changes committed to a separate branch before pushing a merge request to the group admins, who would then review the changes before merging them into the actual master release displayed on the mainsite.
In an event a mistake is made on any branch or a someone goes rouge, there will be version control system that would allow reverting to any of the previous commits.
One existing tool that can be integrated as part of such a solution is LakeFS, which although primarily seems tailored for data science, basically appears to function as an overlay for any existing object storage system (like S3) while providing the aforementioned Git-like functionality when it comes to storing files. Seeing that MD does use Ceph as its object storage system, it should be possible to run LakeFS in parallel by utilizing Ceph's S3-compatible API.
As a by-product, it might also be possible to eventually leverage LakeFS as an actual data mining tool for tricky things like harvesting views (as Panda mentioned on the latest Reddit AMA) or any other data sciencey stuff anyone might fancy at some point.
Now just to make it explicitly clear: It's obvious that adding such a complexity to the sitemight be bats*it insane will require resources that MD currently might not be able to spare and/or afford, not to mentioned the additional integration and dev time required to implement the whole feature in any usable form within mainsite app.
That's why i am only suggesting this a long-term feature of sorts, which if deemed viable, would only become a thing sometime in the non-immediate future.
One solution that i think might be applied here (mostly in the long term future) is to provide groups with capabilities similar to to that of a simplified Git repository - only for files. Each group member (or even any non-memebr) would be able to have changes committed to a separate branch before pushing a merge request to the group admins, who would then review the changes before merging them into the actual master release displayed on the mainsite.
In an event a mistake is made on any branch or a someone goes rouge, there will be version control system that would allow reverting to any of the previous commits.
One existing tool that can be integrated as part of such a solution is LakeFS, which although primarily seems tailored for data science, basically appears to function as an overlay for any existing object storage system (like S3) while providing the aforementioned Git-like functionality when it comes to storing files. Seeing that MD does use Ceph as its object storage system, it should be possible to run LakeFS in parallel by utilizing Ceph's S3-compatible API.
As a by-product, it might also be possible to eventually leverage LakeFS as an actual data mining tool for tricky things like harvesting views (as Panda mentioned on the latest Reddit AMA) or any other data sciencey stuff anyone might fancy at some point.
Now just to make it explicitly clear: It's obvious that adding such a complexity to the site
That's why i am only suggesting this a long-term feature of sorts, which if deemed viable, would only become a thing sometime in the non-immediate future.
Last edited:
Upvote
0