My favorites | Sign in
Project Home Downloads Wiki Issues Source
New issue   Search
for
  Advanced search   Search tips   Subscriptions
Issue 1537: Restrict access to only a few repos
1 person starred this issue and may be notified of changes. Back to list
Status:  Invalid
Owner:  ----
Closed:  Aug 2012


Sign in to add a comment
 
Reported by nikki.ka...@gmail.com, Aug 23, 2012
I am using Gerrit Code Review version 2.4.2 and am not sure if the following can be achieved easily in this version. 

I have a user group (lets say ExternalUsers) who need read/write access to only selected repositories (say 20 odd selected repos out of a total of 200 odd repos). How can this be achieved easily?

At the moment I need to do this for ever repo they SHOULDN'T be able to clone/view on gerrit/push to:
- For refs/*, Read access for ExternalUsers is set to Block
But I will need to do this for roughly 180 repos which is not easy to do from the Gerrit UI and I am not sure how we can do it from the command line. 

It would be good to have an additional section on the Groups page which allows read access to only a small set of repos. 
Aug 23, 2012
Project Member #1 bklarson@gmail.com
A better forum for questions like this might be stackoverflow, where more eyes will see your inquiry.

In general, you should be able to block ExternalUsers in the AllProjects project, which gets inherited by everything else.  Then explicitly grant them permissions in the 20 odd repos needed.
Status: Invalid
Aug 23, 2012
#2 nikki.ka...@gmail.com
Tried doing that but was not able to over-ride the BLOCK (in All-Projects) in inherited projects. So the question is, how can I grant read perms to 20 odd repos if All-Projects BLOCKs them.  
Aug 23, 2012
Project Member #3 edwin.ke...@gmail.com
You may just Deny read-access for the ExternalUsers on the All-Projects. Then under All-Projects have a project that serves as parent project for all external projects ('External-Projects') and grant on this project access to the ExternalUsers. Then make sure that all external projects inherit from the 'External-Projects' projects, while all internal projects should be direct children of the 'All-Projects' project.
Sign in to add a comment

Powered by Google Project Hosting