My favorites | Sign in
Project Home Downloads Wiki Issues Source
New issue   Search
for
  Advanced search   Search tips   Subscriptions
Issue 2560: Administrators cannot push tags
1 person starred this issue and may be notified of changes. Back to list
Status:  Invalid
Owner:  ----
Closed:  Jul 2014


Sign in to add a comment
 
Reported by ifleder...@gmail.com, Mar 18, 2014
************************************************************
***** NOTE: THIS BUG TRACKER IS FOR GERRIT CODE REVIEW *****
***** DO NOT SUBMIT BUGS FOR CHROME, ANDROID, INTERNAL *****
***** ISSUES WITH YOUR COMPANY'S GERRIT SETUP, ETC.    *****
***** THOSE ISSUE BELONG IN DIFFERENT ISSUE TRACKERS!  *****
************************************************************

Affected Version: 2.7

Hi,
I have a weird issue with my permissions.
My developers (group 'Registered User') can create and push tags to gerrit.
My administrators (group 'Administrators') can delete tags (which makes sense because I gave 'push + force' on ref/tags) but cannot create and push them to gerrit.
See below, starting with a project which already has a tag named '1.0.0', a user in the admin group:

$ git clone ssh://user@gerrit:29418/gerrit-demo
Cloning into 'gerrit-demo'...
remote: Counting objects: 36, done
remote: Finding sources: 100% (36/36)
remote: Total 36 (delta 3), reused 30 (delta 3)
Receiving objects: 100% (36/36), 4.07 KiB, done.
Resolving deltas: 100% (3/3), done.
$ cd gerrit-demo/
$ git push origin :1.0.0
remote:
remote: Processing changes: refs: 1, done
To ssh://user@.gerrit:29418/gerrit-demo
 - [deleted]         1.0.0
$ git tag -d 1.0.0
Deleted tag '1.0.0' (was 33dd408)
$ git tag -a 1.0.0 -m 'blah'
]$ git push origin 1.0.0
Counting objects: 1, done.
Writing objects: 100% (1/1), 163 bytes, done.
Total 1 (delta 0), reused 0 (delta 0)
remote:
remote: Processing changes: refs: 1, done
To ssh://user@gerrit:29418/gerrit-demo
 ! [remote rejected] 1.0.0 -> 1.0.0 (prohibited by Gerrit)
error: failed to push some refs to 'ssh://user@gerrit:29418/gerrit-demo'

The project I'm inherits the following Access permissions:

Reference: refs/*
Read ALLOW Non-Interactive Users
Label Code-Review -2/+2 Registered Users
Label Verified -1/+1 Administrators, Non-Interactive Users

Reference: refs/heads/*
Create Reference ALLOW Registered Users
Push (+Force) ALLOW Registered Users

Reference: refs/heads/master
Push DENY Administrators, Registered Users

Reference: refs/tags/*
Push (+Force) ALLOW Administrators
Push Annotated Tag ALLOW Registered Users
Push Signed Tag Exclusive ALLOW Registered Users

How do I get my administrators the ability to push tags?
Mar 18, 2014
#1 ifleder...@gmail.com
I forgot to mention that the Administrators are also members of the 'Registered Users' group, and that I already tried to give explicitly the permission to Administrator on refs/tags for the actions 'Push Annotated Tag' and 'Push Signed Tag' without success.
Jul 14, 2014
#2 RyanAMi...@gmail.com
Also seeing this problem: after adding the below, still an issue:
refs/tags/*
Create Reference Exclusive
 Administrators
 Project Owners
Push Annotated Tag Exclusive
 Administrators Force Push
 Project Owners Force Push
Push Signed Tag Exclusive
 Administrators
 Project Owners
Jul 14, 2014
#3 RyanAMi...@gmail.com
Update: it was forge committer that was needed so solve my problem
Jul 14, 2014
Project Member #4 edwin.ke...@gmail.com
(No comment was entered for this change.)
Status: Invalid
Sign in to add a comment

Powered by Google Project Hosting