@Lea_WMDE is departing from Wikimedia DE (last work day June 24th) and I hereby request her accounts and privileges at WMF systems are disabled/revoked.
Wikitech username: Lea Voget (WMDE)
Likely incomplete list of permissions:
Thank you for checking if some additional permissions or access rights need to be revoked as well.
| Subject | Repo | Branch | Lines +/- | |
|---|---|---|---|---|
| Offboarding for Lea Voget | operations/puppet | production | +2 -3 |
I ran the offboard-user script on mwmaint which told me how what ldapmodify command to run and then I just did that.
removed from the LDAP groups 'wmde' and 'nda'.
Ran offboard-user with the -p flag for Phabricator, it checked all the remaining Phabricator groups but none of them are privileged, so no changes needed there.
Is not member of any LDAP group Is not a member in any privileged group lea-wmde does not exist in modules/admin/data/data.yaml
I think this is resolved but a second pair of eyes if there is anything else would be nice before fully closing the ticket.
Change #1049019 had a related patch set uploaded (by Slyngshede; author: Slyngshede):
[operations/puppet@production] Offboarding for Lea Voget
I did find the username in data.yaml, see https://gerrit.wikimedia.org/r/c/operations/puppet/+/1049019
Change #1049019 merged by Slyngshede:
[operations/puppet@production] Offboarding for Lea Voget
@MoritzMuehlenhoff I _think_ this is complete? Except we might want to follow-up regarding the part where the offboard script said it didn't find the user in data.yaml ?
@Dzahn It's already on my todo :-)
The functionality seems to be available in the script, so it does seem like it was intended to work.
Closing this task, I've created https://phabricator.wikimedia.org/T371270 for the issues regarding the offboard-user script.