Issue 1050: HTTP service is available even when not enabled in gerrit.config.
Status:  Released
Owner: ----
Closed:  Dec 2014
Reported by piotr.si...@gtempaccount.com, Jul 14, 2011
Affected Version: 2.2.1-188-g2b58c2a

What steps will reproduce the problem?
1. Configure Gerrit to allow only SSH scheme ([download] scheme = ssh).
2. Clone existing repository via HTTP.

What is the expected output? What do you see instead?

It appears that only displayed download links are affected by configuration and git-over-HTTP is always available, regardless of download.scheme settings.
Jul 14, 2011
#1 piotr.si...@gtempaccount.com
Oops, something went wrong... Missing part:

What is the expected output? What do you see instead?

Expected: 400 Bad Request / 403 Forbidden / 404 Not Found response

Current : Repository is cloned as if download.scheme = http would be enabled.
Jul 14, 2011
#2 piotr.si...@gtempaccount.com
Sorry, the title should be "git-over-HTTP service ..."
Jul 14, 2011
#3 sop@google.com
Is it really a problem that the /p/ URL is available?
Jul 14, 2011
#4 piotr.si...@gtempaccount.com
For me? No, because I'm using it for anonymous HTTP anyway.

However, I would expect that HTTP would be disabled when not configured in download.scheme.
Aug 28, 2011
#5 m1000...@gmail.com
remove read access +1 for Anonymous Users from the project, you will get the expected result.
Aug 29, 2011
#6 piotr.si...@frickle.com
No, I won't. The expected result is that git-over-HTTP wouldn't be available at all, with your work-around, it would be still available for registered users.
Jul 9, 2012
#7 ps...@gmx.de
version 2.4.2 is still affected.

Jan 15, 2013
#8 lloydch...@gmail.com
Affected Version: 2.5
May 7, 2013
#9 Ostfries...@gmail.com
Also affected in 2..5.2
Dec 3, 2014
#10 ben.bee...@gmail.com
Still an issue in 2.8.6.1.  Is there anyone who can point me in the right direction for where in source I might look to try to fix this?  
Dec 3, 2014
Project Member #11 huga...@gmail.com
https://gerrit-review.googlesource.com/#/c/62080/
Status: ChangeUnderReview
Dec 4, 2014
Project Member #12 huga...@gmail.com
Change moved to stable-2.10:
https://gerrit-review.googlesource.com/#/c/62110
Dec 5, 2014
Project Member #13 huga...@gmail.com
(No comment was entered for this change.)
Status: Submitted
Labels: FixedIn-2.10
Jan 27, 2015
Project Member #14 ziv...@gmail.com
(No comment was entered for this change.)
Status: Released