[ixpmanager] [RELEASE] V5.2.0 - PeeringDB OAuth, rfc1997 pass-through, framework upgrade

[Barry O'Donovan]

Rasmus Åberg wrote on 01/10/2019 09:45:
> Is it possible for customers, by themselves, to choose if they want
> to enable/disable PDB login? As I understood the docs, only
> superadmins can change it right now, or?

Right now, only superadmins.

We put quite a bit of thought into this and some of the reasoning includes:

* access is as custuser by default (read only).
* PeeringDB do a pretty good check when creating and assigning a user to
an org.
* the exposure is pretty minimal really (traffic graphs at an IX).
* we discussed it with a lot of members (INEX members and other IX
members) and got zero objections. In fact the response was
over-overwhelmingly in favour of this.
* 'off by default' at one IX will cause confusion and head-scratching
and creates a barrier to access that I think - based on current
discussions - in >99% of cases is not necessary.

Provision for the majority and if any one objects, opt them out is my
advice.

If we start getting feedback in the other direction we'll certainly look
at reviewing this. And we may also add the option to disable for the
member in the next pass at the member area.

Hope that helps explain where we came from on this,

 - Barry


> The reason I'm asking is because I'm thinking about disabling it by
> default and let custadmins enable it by themselves. But if I need to
> do it manually for every customer it's gonna be a pain...
> 
> //Rasmus
> 
> On 2019-10-01, 10:34, "ixpmanager on behalf of Barry O'Donovan"
> <ixpmanager-bounces at inex.ie on behalf of barry.odonovan at inex.ie>
> wrote:
> 
> Hi Boris,
> 
> Boris Mimeur wrote on 01/10/2019 00:27:
>> Great work on this. We upgraded to 5.2 and got the Peering OAuth
>> working seemlessly. Very useful feature !
> 
> Yay!
> 
> I could be wrong but I suspect you're the second to implement this
> after us (INEX).
> 
> Many of our members certainly like it. We have 15 users that have
> signed in with it and many would be first time users from our larger 
> international membership so that's an immediate win.
> 
> - Barry
> 
> _______________________________________________ INEX IXP Manager
> mailing list ixpmanager at inex.ie Unsubscribe or change options here:
> https://www.inex.ie/mailman/listinfo/ixpmanager
> 
> _______________________________________________ INEX IXP Manager
> mailing list ixpmanager at inex.ie Unsubscribe or change options here:
> https://www.inex.ie/mailman/listinfo/ixpmanager
> 


-- 

Kind regards,
Barry O'Donovan
INEX Operations

https://www.inex.ie/support/
+353 1 531 3339