)]}'
{"doc/source/sysadmin.rst":[{"author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"change_message_id":"9248202d333ed02d82b32a1dc910e4c6c0ae7e66","unresolved":false,"context_lines":[{"line_number":129,"context_line":"Gerrit administrators keep two accounts: one for normal code review"},{"line_number":130,"context_line":"activity and one for performing Gerrit administration. Following the same"},{"line_number":131,"context_line":"pattern as our Kerberos administrator account logins, the admin account"},{"line_number":132,"context_line":"corresponding to ``$USER`` woule be ``$USER.admin`` (Gerrit doesn\u0027t allow"},{"line_number":133,"context_line":"``/`` in usernames) so they can be easily identified when auditing"},{"line_number":134,"context_line":"activity. Unlike the normal code review account, the admin account should"},{"line_number":135,"context_line":"have no OpenID so that it is only accessable by API/CLI methods so they"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1f621f24_e255581f","line":132,"range":{"start_line":132,"start_character":27,"end_line":132,"end_character":32},"updated":"2020-10-28 12:53:03.000000000","message":"would","commit_id":"b20a015893a860c571eaa58924d89ddddcee329d"},{"author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"change_message_id":"9248202d333ed02d82b32a1dc910e4c6c0ae7e66","unresolved":false,"context_lines":[{"line_number":147,"context_line":"We ``suexec`` as the ``openstack-project-creator`` account because the"},{"line_number":148,"context_line":"magic ``Gerrit Code Review`` pseudoaccount can\u0027t set group memberships so"},{"line_number":149,"context_line":"we need to run that command as a user which is already in the"},{"line_number":150,"context_line":"``Administrators`` group."},{"line_number":151,"context_line":""},{"line_number":152,"context_line":"GitHub Access"},{"line_number":153,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1f621f24_ed18a976","line":150,"updated":"2020-10-28 12:53:03.000000000","message":"I think it would be helpful to have some examples as to how to perform some actions like adding initial group members for new projects or  force-merging a change.\n\nOr would it be seen acceptable to just use the admin account to temporarily add the normal $USER account to Administrators and continue to perform those actions via the UI? One argument for this solution would be that it makes it easy to double check the audit log, which I guess would not get looked at very often via the CLI, if that\u0027s at all possible.","commit_id":"b20a015893a860c571eaa58924d89ddddcee329d"},{"author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"change_message_id":"3210287cb7675a87ccb44d0f727316fc9025437a","unresolved":false,"context_lines":[{"line_number":175,"context_line":"superuser permissions like ``Project Bootstrappers``, but keep in mind that"},{"line_number":176,"context_line":"an attacker who has quietly gained control of your account at the OpenID"},{"line_number":177,"context_line":"provider could be waiting for that opportunity to take advantage of the"},{"line_number":178,"context_line":"added permissions, or you may simply forget to remove the account afterward"},{"line_number":179,"context_line":"negating the added safety of this account separation."},{"line_number":180,"context_line":""},{"line_number":181,"context_line":"For more examples, see the detailed documentation for Gerrit\u0027s SSH CLI,"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1f621f24_5adcd573","line":178,"updated":"2020-10-29 23:22:24.000000000","message":"In modern English, afterward and afterwards are synonymous, with the former more commonly found in North American English and the latter more frequent in British/European English, but both regions do still use both spellings and consider them to be interchangeable. (The OED\u0027s entries on -ward and -wards suffixes indicate that this is essentially the same for all adverbs of that class: backward, eastward, forward, homeward, onward...)","commit_id":"427ae2a2aa642b27dfee233419343ee140f45adb"},{"author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"change_message_id":"b46dc802a008a8725aa719582e9bf71229c29597","unresolved":false,"context_lines":[{"line_number":175,"context_line":"superuser permissions like ``Project Bootstrappers``, but keep in mind that"},{"line_number":176,"context_line":"an attacker who has quietly gained control of your account at the OpenID"},{"line_number":177,"context_line":"provider could be waiting for that opportunity to take advantage of the"},{"line_number":178,"context_line":"added permissions, or you may simply forget to remove the account afterward"},{"line_number":179,"context_line":"negating the added safety of this account separation."},{"line_number":180,"context_line":""},{"line_number":181,"context_line":"For more examples, see the detailed documentation for Gerrit\u0027s SSH CLI,"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1f621f24_ce5959ff","line":178,"range":{"start_line":178,"start_character":66,"end_line":178,"end_character":75},"updated":"2020-10-29 07:51:17.000000000","message":"afterwards?","commit_id":"427ae2a2aa642b27dfee233419343ee140f45adb"}]}