| Issue 1050: | HTTP service is available even when not enabled in gerrit.config. | |
| 7 people starred this issue and may be notified of changes. | Back to list |
Affected Version: 2.2.1-188-g2b58c2a What steps will reproduce the problem? 1. Configure Gerrit to allow only SSH scheme ([download] scheme = ssh). 2. Clone existing repository via HTTP. What is the expected output? What do you see instead? It appears that only displayed download links are affected by configuration and git-over-HTTP is always available, regardless of download.scheme settings.
Jul 14, 2011
#1
piotr.si...@gtempaccount.com
Jul 14, 2011
Sorry, the title should be "git-over-HTTP service ..."
Jul 14, 2011
Is it really a problem that the /p/ URL is available?
Jul 14, 2011
For me? No, because I'm using it for anonymous HTTP anyway. However, I would expect that HTTP would be disabled when not configured in download.scheme.
Aug 28, 2011
remove read access +1 for Anonymous Users from the project, you will get the expected result.
Aug 29, 2011
No, I won't. The expected result is that git-over-HTTP wouldn't be available at all, with your work-around, it would be still available for registered users.
Jul 9, 2012
version 2.4.2 is still affected.
Jan 15, 2013
Affected Version: 2.5
May 7, 2013
Also affected in 2..5.2
Dec 3, 2014
Still an issue in 2.8.6.1. Is there anyone who can point me in the right direction for where in source I might look to try to fix this?
Dec 4, 2014
Change moved to stable-2.10: https://gerrit-review.googlesource.com/#/c/62110
Dec 5, 2014
(No comment was entered for this change.)
Status:
Submitted
Labels: FixedIn-2.10
Jan 27, 2015
(No comment was entered for this change.)
Status:
Released
|
|
| ► Sign in to add a comment |