numfocus / numfocus/infrastructure

CloudFlare account management concerns/suggestions

Open
#42 0 comments 1 reaction 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
No language data
Stars
16
Forks
8
Avg merge
4h 51m
Merged PRs (30d)
3

Description

Cloudflare allows only Super Administrators to edit/manage account members. The numfocus account currently only has one Super Admin.

Expanding the number of Super Administrators on the account and deprecating the use of the current Super Admin account would streamline membership management. Right now, the current Super Admin account is a single point of failure (if NumFOCUS somehow loses access to that account, it might require us to switch to a new Cloudflare account and reconfigure everything). In addition, because that account is not tied to a specific person, there is less accountability when changes are made.

@bryevdv previously raised the concern that almost all of the members on the CloudFlare account are Administrators (who can access and change everything on the account except for billing and membership management) and do not have two factor authentication enabled. It would be best to require two factor authentication for all Administrators and restrict most members to the one or two domains that they might actually need to manage.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No repository files, tests, or entry points are identified. Start by reviewing the current Cloudflare account structure and access policies, then define the administrators, two-factor authentication requirements, domain restrictions, and account-transition steps that would constitute completion.

Written by the indexing model from the issue text.

Assessment

Domain
cloud, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.