Monorepo for Tangled tangled.org

spindle: don't ingest repo collaborators (use repo as delegated account) #615

Open boltless.me
Open opened by boltless.me

Context:

Instead of syncing repo collaborators in multiple services and trying to perform same ACL, we can do all collaborator based ACL from Knot. By using git repository DID as delegated account, other services like Spindle or AppView can just trust it without ensuring its synced collaborator list is up-to-date every time.

AppView will still ingest collaborators because we want to show collaborator list in AppView. But services that only need ACL like Spindle can just trust the git repository DID and nothing else.

Combining with #335: remove sh.tangled.*.member records, spindle can only focus on ingesting records that triggers the pipeline.

Sign up or Sign in to add to the discussion.