clehner / git-ssb

social coding on secure-scuttlebutt [migrated to git-ssb]
https://git.scuttlebot.io/%25n92DiQh7ietE%2BR%2BX%2FI403LQoyf2DtR3WQfCkDKlheQU%3D.sha256
256 stars 15 forks source link

Non-creator user able to push to ssb repo #8

Open aflock opened 6 years ago

aflock commented 6 years ago

Testing out git-ssb, I published a repo to ssb://%GU8gn9wqwZxSg4gPeocV3bVWkw1JuvA4T3IwnML4CsQ=.sha256 with an empty README.md

@adridadou was then able to add the repo as a remote and push changes to it. Great! I pulled from the repo after awhile and got his changes.

Although the documentation specifies "You can only push to SSB git repos that you created, not ones created by other users."

Bug? If this is actually intended, is there a way to prevent users with the address from pushing (read-only access essentially)?