Hi. We actually have permissions now in the new testdays app :-) The creation of the event should be done by a QA person. Please just create a QA ticket and tell us which testcases (or whether to copy it from some previous event), and we will create it. Thanks.

The linked SOP is unfortunately a bit outdated, I tried to update it at least quickly.

Why is permission not allowed for event owner? We should better have documentation first.

Where to create ticket please provide link?
This is just difficult now

Here's the doc: https://fedoraproject.org/wiki/QA/Test_Days/Create

It's always been done through tickets, see existing tickets. Honestly I had no idea that somebody external used our admin pages in the past, it wasn't meant to work this way (at least in my view).

Why is permission not allowed for event owner?

That's an interesting idea, but it never was implemented this way, and it isn't even now. It's a global "edit anything" permission, or none. However, I think being able to set the permission for a specific event only is a very good idea to consider, so I created #63 to track that.

Here's the doc: https://fedoraproject.org/wiki/QA/Test_Days/Create

It's always been done through tickets, see existing tickets. Honestly I had no idea that somebody external used our admin pages in the past, it wasn't meant to work this way (at least in my view).

FYI, I have been using admin interface since last 10 to 12 Fedora releases without any issue. This gave me flexibility to create test event, any time update test event, export results. If same is not allowed now then its unnecessary blocking and wasting time of everyone involved in test event organization. What is problem to give permission to FAS users to this admin interface?

Why is permission not allowed for event owner?

That's an interesting idea, but it never was implemented this way, and it isn't even now. It's a global "edit anything" permission, or none. However, I think being able to set the permission for a specific event only is a very good idea to consider, so I created #63 to track that.

Will watch that ticket for any updates.

Thank you.

FYI, I have been using admin interface since last 10 to 12 Fedora releases without any issue. This gave me flexibility to create test event, any time update test event, export results.

I understand this comes as a surprise to you, but please understand this also comes as a surprise to me :-) I believed it was always controlled just by QA, most often by Sumantro. As you can see in our tracker, we have hundreds of test day tickets for managing this. You might've been the exception who did it on their own (or not, I might still be surprised).

I believe the SOP was originally intended as internal, to document the workflow for ourselves, but gradually we linked it in community-oriented howtos, and nobody realized that the admin links (with no authentication!) shouldn't just be generally available.

In the past year or so, we had numerous attacks on the test days apps, with sql injection and other types of attacks tried, and the test results were spammed frequently. That forced us to rewrite the app and introduce authentication support (including admin interface, this time, finally).

If same is not allowed now then its unnecessary blocking and wasting time of everyone involved in test event organization.

I think you're exaggerating. If you create a ticket and provide a list of test cases (or say "the same as the last time - link"), you'll have the testday app event set up the next day, most likely. It's just a few minutes of work for us. You can even provide the test cases in the app format and that will make it even easier (if you wanted to set it up yourself, you'd need to have the format as well). If you need changes, just update the ticket.

Everything else is in your power to control, perhaps except the QA calendar. I don't know how it worked in the past, but no changes were done to the calendar, so it should still be the same. It looks like qa-admin people can edit it. The wiki is fully public.

What is problem to give permission to FAS users to this admin interface?

The main "problem" is that I don't know if we want to distribute admin interface rights. The fact that it worked this way before doesn't mean it should work the same way now. The reason to rewrite the app was to get more security.

So, we'll talk about this in our team, and clarify our approach in this.

Thank you for the above detailed reply. If you want you can close this ticket now.

Regarding wiki syntax export, I filed an RFE to make it public in #64 .

If you have further improvements ideas, please feel free to file them as separate tickets, thanks.

I'll try to discuss the admin rights handling in our team soon, and I'll ping you if we decide to distribute them. Thanks for this discussion, closing.

Follow-up is in fedora-qa ticket.

This issue has been migrated to Fedora Forge:
https://forge.fedoraproject.org/quality/testdays-web/issues/62

Please continue any further discussion there.