Hey,

I yesterday found something else which should be checked: https://chrome-internal-review.googlesource.com/ .
I can access that website with my gmail account too, although I shouldn't be able (if internal means "only" for Google employees.

See attachments.

Kind Regards

Deleted: Internal at May 04 17-58-57.png 93.2 KB

	Internal at May 04 17-58-57.png 93.2 KB View Download

Dirk, could you check this out or re-assign as appropriate? Thanks!

I think we changed things at some point so that chromium-swarm is supposed to be readable to logged-in users now, and likely the doc is just old. I would not expect a generic logged-in user to have permission to retry or cancel tasks, and, when I just did a simple test from one such account, I (correctly) wasn't able to cancel a task.

maruel@ (or vadimsh@ or estaab@), can you confirm this and update the docs if I'm right, or fix something if I'm wrong and this is a real issue?

chrome-internal-review.googlesource.com should be accessible to signed-in accounts, but the contents themselves should not be visible (and, as far as I know, aren't), so I don't think this is an issue.

Thanks for the report. It is working as intended.

The documentation is stale, I'm updating it.

I made chromium-swarm.appspot.com accessible to any Google Account but didn't advertise it publicly.

As Dirk said for chrome-internal-review.googlesource.com, it is also working as intended.

Thank you for your quick and kind responses!
I appreciate your clarification.

Updates:
- The wording is technically correct. A "valid Google account" is what you may call a "GMail account". In practice a Google account may not be linked to GMail. This neither means a "googler account". I agree it can be a bit confusing.
  - Still, the document was very stale. Did a quick cleanup. 
- Filed  issue 839909  for the breakage on Firefox. That's unfortunate and we'll look at fixing it.
- You see the button for actions like "Cancel", but they won't work even if you tried to enable it by messing with the Web UI. This is enforced server-side. That's working as intended, so everyone see a similar Web UI.

Feel free to check out https://chromium.googlesource.com/infra/luci/luci-py.git, look at the code and report anything you find, it's open source!

Marking as Fixed since I updated the doc a bit. :) Removing the restricted view as there's no more action item left.

Going further, I've spent lot of time auditing Chromium Swarm around 3 weeks ago and was not able to run any command on the cluster without a valid Chromium or Google account.

I also verified the API.