[Labs-l] IMPORTANT: Changing the handling of groups, which means group names will change

Fri Apr 13 20:56:25 UTC 2012

This is complete. Let me know if you run into any issues.

On Thu, Apr 12, 2012 at 8:37 PM, Ryan Lane <rlane32 at gmail.com> wrote:
> See: https://bugzilla.wikimedia.org/show_bug.cgi?id=35874
>
> There's a problem with how we currently name groups directly after
> projects. If a project has a name that is the same as a system group,
> it causes issues. This can also have security issues. For instance, if
> a project is named "root", then members of that project would also
> exist in the root group on other projects they are a member of.
>
> So, to work around this issue, we'll be prefixing all group names with
> "project-". If you rely on project group names, you should adjust your
> configuration and/or scripts for this change. In puppet you can
> reference the project's group via the $projectgroup variable.
>
> - Ryan