[wp-meta] [Making WordPress.org] #5744: For plugins using release confirmation, email confirmation is not required to add/remove committers.

Making WordPress.org noreply at wordpress.org
Tue May 25 00:40:40 UTC 2021


#5744: For plugins using release confirmation, email confirmation is not required
to add/remove committers.
------------------------------+---------------------
 Reporter:  wfmatt            |       Owner:  (none)
     Type:  defect            |      Status:  new
 Priority:  normal            |   Milestone:
Component:  Plugin Directory  |  Resolution:
 Keywords:                    |
------------------------------+---------------------

Comment (by dd32):

 Replying to [ticket:5744 wfmatt]:
 > > Ideally, the committer who committed the release would not be able to
 be the sole person who approves the release as well, which would
 effectively make this always a 2+ person scenario. Maybe an exception
 would be the same person can sign it off, as long as it's not forcefully
 enabled for the plugin due to level of usage.
 >
 > I saw some push back in the discussion. I think this would be good to
 have even though it doesn't necessarily address this issue. I think making
 it configurable by plugin developers would help address some of the
 concerns. For instance, being able to set release confirmations to 2
 approvals, but not be able to decrease that without involving the plugins
 or meta team.

 This is possible by contacting the plugins team, who can enable multi-
 sign-off. It's not able to be opt-in through the plugin admin as many
 plugin authors already enable single-sign-off "accidentally" despite the
 two warnings as they "want to see if it will actually enable".

-- 
Ticket URL: <https://meta.trac.wordpress.org/ticket/5744#comment:1>
Making WordPress.org <https://meta.trac.wordpress.org/>
Making WordPress.org


More information about the wp-meta mailing list