limiting ref visibility to specific users

3 messages, 3 authors, 2016-06-15 · open the first message on its own page

limiting ref visibility to specific users

From: Enrico Weigelt <hidden>
Date: 2016-06-15 22:49:20

Hi folks,


I'd like to control which refs are visible to certain users
(when coming via ssh). Is there already some generic way to
do that (eg. passing some filter rule by a calling wrapper ?)


cu
-- 
----------------------------------------------------------------------
 Enrico Weigelt, metux IT service -- http://www.metux.de/

 phone:  +49 36207 519931  email: weigelt@metux.de
 mobile: +49 151 27565287  icq:   210169427         skype: nekrad666
----------------------------------------------------------------------
 Embedded-Linux / Portierung / Opensource-QM / Verteilte Systeme
----------------------------------------------------------------------

Re: limiting ref visibility to specific users

From: Sverre Rabbelier <hidden>
Date: 2016-06-15 22:49:20

Heya,

On Tue, Aug 17, 2010 at 10:09, Enrico Weigelt [off-list ref] wrote:
I'd like to control which refs are visible to certain users
(when coming via ssh). Is there already some generic way to
do that (eg. passing some filter rule by a calling wrapper ?)
Shawn, weren't you looking into something similar for Gerrit? Although
I think what you were investigating would allow the user to get the
rest of the refs somehow?

-- 
Cheers,

Sverre Rabbelier

Re: limiting ref visibility to specific users

From: Shawn Pearce <hidden>
Date: 2016-06-15 22:49:20

On Tue, Aug 17, 2010 at 8:48 AM, Sverre Rabbelier [off-list ref] wrote:
On Tue, Aug 17, 2010 at 10:09, Enrico Weigelt [off-list ref] wrote:
quoted
I'd like to control which refs are visible to certain users
(when coming via ssh). Is there already some generic way to
do that (eg. passing some filter rule by a calling wrapper ?)
Shawn, weren't you looking into something similar for Gerrit? Although
I think what you were investigating would allow the user to get the
rest of the refs somehow?
Yup.  We implemented this in JGit by allowing the application to
provide an implementation of a RefFilter interface, only the refs that
the filter approves are shown to the remote client.  During
receive-pack (server side of push) the RefFilter also is used to
restrict what objects the client may mention as a delta base, or as an
object in the graph (e.g. commit parent, commit root tree, or tree
entry member).

There is no equivalent in C Git.  You have to use either Gerrit Code
Review, or build your own server on top of JGit to take advantage of
that feature.

-- 
Shawn.
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help