Promote users with group developer access to maintainers of projects they create within group
Problem to solve
Currently, users inherit their group permissions for any project within the group. This includes when users create projects within the group. For example, a user that is a Developer in group A creates a project and they are granted developer access to that project.
Proposal: if a user has developer access in a group and creates a project within that group, they should be set as maintainer in that project.
Customer is requesting this proposed feature: https://gitlab.zendesk.com/agent/tickets/117214
Intended users
Software Developer
Further details
From the user:
why would a “developer” even be allowed to create projects at all? They can create a project but they can’t do the initial push because they aren’t maintainers?
If I give an LDAP group “developer” access to a group. And they go in and create a “project”. Shouldn’t that user end up as the “owner/maintainer” of that project…?
Proposal
If a user has developer permissions for a group and they create a project in that group, they should be made a maintainer of the project they created.
Permissions and Security
Potential issues here, as Groups are designed to have user permissions inherited to the projects and subgroups within the group. You can always manually give a user increased permissions for a project or subgroup within a group. This would be a special corner case of automatic increased permission.
Documentation
User permissions doc: https://docs.gitlab.com/ee/user/permissions.html
What does success look like, and how can we measure that?
Users that have developer access in a group will be granted maintainer access to any project they create in the group. This will allow them to do the initial push to the project.