]> source.dussan.org Git - gitblit.git/commit
Finer-grained repository access permissions (issue 36)
authorJames Moger <james.moger@gitblit.com>
Wed, 10 Oct 2012 04:05:34 +0000 (00:05 -0400)
committerJames Moger <james.moger@gitblit.com>
Wed, 10 Oct 2012 04:05:34 +0000 (00:05 -0400)
commit20714aee0d2d2a989d93d6065e081aed8ac85fbf
treeac1dfc4f2519b766ad1306a9fd2d2e8e9ecf8ac8
parentc890e1f7d3f5cd83025b1d993cedf4990de63897
Finer-grained repository access permissions (issue 36)

Implemented discrete repository access permissions to replace the
really primitive course-grained permissions used to this point.  This
implementation allows for finer-grained access control, but still
falls short of integrated, branch-based permissions sought by some.

Access permissions follow the conventions established by Gitosis and
Gitolite so they should feel immediately comfortable to experienced
users.  This permissions infrastructure is complete and works exactly as
expected.  Unfortunately, there is no ui in this commit to change
permissions, that will be forthcoming.  In the meantime, Gitblit
hot-reloads users.conf so the permissions can be manipulated at runtime
with a text editor.

The following per-repository permissions are now supported:
- V (view in web ui, RSS feeds, download zip)
- R (clone)
- RW (clone and push)
- RWC (clone and push with ref creation)
- RWD (clone and push with ref creation, deletion)
- RW+ (clone and push with ref creation, deletion, rewind)

And a users.conf entry looks something like this:

[user "hannibal"]
password = bossman
repository = RWD:topsecret.git
34 files changed:
docs/01_features.mkd
docs/01_setup.mkd
docs/04_releases.mkd
docs/permissions_matrix.ods [new file with mode: 0644]
docs/permissions_matrix.png [new file with mode: 0644]
src/com/gitblit/ConfigUserService.java
src/com/gitblit/Constants.java
src/com/gitblit/DownloadZipFilter.java
src/com/gitblit/FederationPullExecutor.java
src/com/gitblit/FileUserService.java
src/com/gitblit/GitBlit.java
src/com/gitblit/GitFilter.java
src/com/gitblit/GitServlet.java
src/com/gitblit/GitblitUserService.java
src/com/gitblit/IUserService.java
src/com/gitblit/PagesFilter.java
src/com/gitblit/SyndicationFilter.java
src/com/gitblit/models/RepositoryModel.java
src/com/gitblit/models/TeamModel.java
src/com/gitblit/models/UserModel.java
src/com/gitblit/utils/JsonUtils.java
src/com/gitblit/wicket/pages/BasePage.java
src/com/gitblit/wicket/pages/ForkPage.java
src/com/gitblit/wicket/pages/ForksPage.java
src/com/gitblit/wicket/pages/RepositoryPage.java
src/com/gitblit/wicket/pages/RootPage.java
tests/com/gitblit/tests/FederationTests.java
tests/com/gitblit/tests/GitBlitSuite.java
tests/com/gitblit/tests/GitBlitTest.java
tests/com/gitblit/tests/GitServletTest.java
tests/com/gitblit/tests/JGitUtilsTest.java
tests/com/gitblit/tests/PermissionsTest.java [new file with mode: 0644]
tests/com/gitblit/tests/RpcTests.java
tests/com/gitblit/tests/UserServiceTest.java