[wp-meta] [Making WordPress.org] #5744: For plugins using release confirmation, email confirmation is not required to add/remove committers.
Making WordPress.org
noreply at wordpress.org
Tue May 25 00:40:40 UTC 2021
#5744: For plugins using release confirmation, email confirmation is not required
to add/remove committers.
------------------------------+---------------------
Reporter: wfmatt | Owner: (none)
Type: defect | Status: new
Priority: normal | Milestone:
Component: Plugin Directory | Resolution:
Keywords: |
------------------------------+---------------------
Comment (by dd32):
Replying to [ticket:5744 wfmatt]:
> > Ideally, the committer who committed the release would not be able to
be the sole person who approves the release as well, which would
effectively make this always a 2+ person scenario. Maybe an exception
would be the same person can sign it off, as long as it's not forcefully
enabled for the plugin due to level of usage.
>
> I saw some push back in the discussion. I think this would be good to
have even though it doesn't necessarily address this issue. I think making
it configurable by plugin developers would help address some of the
concerns. For instance, being able to set release confirmations to 2
approvals, but not be able to decrease that without involving the plugins
or meta team.
This is possible by contacting the plugins team, who can enable multi-
sign-off. It's not able to be opt-in through the plugin admin as many
plugin authors already enable single-sign-off "accidentally" despite the
two warnings as they "want to see if it will actually enable".
--
Ticket URL: <https://meta.trac.wordpress.org/ticket/5744#comment:1>
Making WordPress.org <https://meta.trac.wordpress.org/>
Making WordPress.org
More information about the wp-meta
mailing list