My favorites | Sign in
Project Home Downloads Wiki Issues Source
New issue   Search
for
  Advanced search   Search tips   Subscriptions
Issue 960: Only project owner should submit to refs/meta/config
  Back to list
Status:  Released
Owner:  mf...@codeaurora.org
Closed:  May 2011


Sign in to add a comment
 
Project Member Reported by sop@google.com, May 19, 2011
Don't allow submit permission on refs/meta/config for anyone except a project owner. Allowing non-project owners to submit changes to this branch might allow an end-run around the concept of project ownership and give users with submit permission effective project ownership by being able to change the project ACL.
May 19, 2011
#1 sop@google.com
(No comment was entered for this change.)
Summary: Only project owner should submit to refs/meta/config
May 19, 2011
Project Member #2 mf...@codeaurora.org
I will update this so that the submit rule for refs/meta/config is simply: "is project owner", and so that the push rule for refs/meta/config requires push permissions for that branch (as normal) and additionally add the "is project owner" test.
Owner: mf...@codeaurora.org
May 19, 2011
#3 sop@google.com
(No comment was entered for this change.)
Status: Submitted
Labels: FixedIn-2.2.0
Jun 7, 2011
#4 sop@google.com
(No comment was entered for this change.)
Status: Released
Sign in to add a comment

Powered by Google Project Hosting