Access Control Methodology

Overview

The NCIP channel is a GitHub Organization Account where all code developed for the NCIP program and migrated to the open source community will reside. Each product will have its own project in the NCIP channel.

The owner of a project will initially be the NCI (opensource@mail.nih.gov). The NCI will create an Admin Team within the NCIP channel and named after the project to manage its repositories according to GitHub Access Permissions. Initially the team will include key project developers.

After initial creation the team members will have the right and responsibility to manage membership of their own team. Over time the team will own their work and will manage their repositories as needed.

Repository Access

All members of a project's Admin Team have full control over their own membership and over the repositories associated with the project. They have the exclusive right and responsibility to publish changes in the project repositories within the NCIP channel. However, not all developers working on a project need to be a member of the project Admin Team. Instead, developers should work with the Admin Team using the GitHub Collaboration Model.

Any developer, contractor, or volunteer may Fork the Repository into their own GitHub User Account and publish changes to it without restriction. One may then use GitHub's Pull Request feature to ask a member of the project Admin Team to review the changes and integrate them into the main repository.