search

tomaswolf / gerrit-gitblit-plugin

Integrates standard GitBlit (currently 1.7.1) as a repository viewer in Gerrit
Apache License 2.0
22 stars 5 forks source link

Access control #20

Closed orgads closed 8 years ago

orgads commented 8 years ago

Hi,

I have a private project in gerrit, which only a particular group can access.

Still, GitBlit plugin allows even anonymous access to this repository. Is there a way to block it?

tomaswolf commented 8 years ago

I have such a project, too, and it is not visible through GitBlit. I suspect a configuration error. Did you set in Gerrit under "Access" for refs/* "Read" permission for both Anonymous Users and Registered Users to DENY?

orgads commented 8 years ago

That worked, thanks. I previously set exclusive ALLOW for that group, I guess that's not enough.

tomaswolf commented 8 years ago

After having re-read the Gerrit docu, I'm not sure whether ALLOW EXCLUSIVE for one group on refs/* should nullify the inherited (from All-Projects) ALLOW for anons and general registered users. If it should have and didn't, then that's a bug in Gerrit. I've always set these two to DENY when I wanted or needed to restrict access.