Last modified: 2014-09-02 05:35:22 UTC
If we synchronize groups with LDAP then we could have mediawiki groups also usable within labs. After doing so we should restrict ssh access on all instances in all projects to the "shell" group.