It would be really difficult to maintain sanity if we allow this...

I've renamed this in response to a recent IRC discussion. The idea is to add service users to service groups so that multiple tools (in different service groups) can have access to files owned by a single shared tool.

Seems potentially useful to me.

GUI code is here:

https://gerrit.wikimedia.org/r/#/c/75897/

It adds cross-project service users to ldap. I haven't tested the actual permissions functionality of this. You can play with the GUI behavior (and check my ldap work) here:

https://wikitech-test.wmflabs.org/wiki/Special:NovaProject

I've been using the 'sg' project for testing.

I see that the patch has been merged. Can we close this, and perhaps add some docs?

(In reply to comment #4)

I see that the patch has been merged. Can we close this, and perhaps add some
docs?

abogott: Can this be closed?

Yep!