Dear List,
we wrote a servlet that is basically a proxy for git-http-backend. We
want to control who can create a new branch. Is there a way to reject a
push that would create a new branch (without using hooks)?
Thanks in advance,
Ákos Tajti
On Thu, May 31, 2012 at 1:38 PM, Tajti Ákos [off-list ref] wrote:
we wrote a servlet that is basically a proxy for git-http-backend. We want
to control who can create a new branch. Is there a way to reject a push that
would create a new branch (without using hooks)?
Not easily. Is the servlet in Java? You might want to consider just
embedding JGit[1] and using that. JGit will let your servlet install
an implementation of its PreReceiveHook interface where you can
inspect the parsed protocol data, decide what to do, and reject it or
allow it through.
To reject before it makes it to git-http-backend you need to parse the
incoming data stream, decode the commands, and then forward the
unparsed stream to git-http-backend. If you are in Java you might be
able to reuse some of the JGit classes to help you parse the protocol.
Maybe. Those classes weren't really built to be used on their own.
[1] http://www.eclipse.org/jgit/
On Fri, Jun 1, 2012 at 2:08 AM, Tajti Ákos [off-list ref] wrote:
Dear List,
we wrote a servlet that is basically a proxy for git-http-backend. We want
to control who can create a new branch. Is there a way to reject a push that
would create a new branch (without using hooks)?
Not sure what else your servlet does or how it affects things but
gitolite has controls to prevent branches being created (among many
many other things, limited mostly by ones imagination!).
Gitolite is normally used with ssh but it has been tested with smart
http also. It itself acts as a proxy for git-http-backend, inspecting
the URI and QUERY_STRING and such animals to decode some things, while
the rest happens via a special update hook that is installed in each
repo that it controls.
(Specifically, the branch create check is done there, not in the part
that is proxying the git-http-backend process. You probably know that
the update hook is invoked by git itself).
Sitaram
Thanks for the answers!
Ákos
2012.06.01. 5:53 keltezéssel, Sitaram Chamarty írta:
On Fri, Jun 1, 2012 at 2:08 AM, Tajti Ákos[off-list ref] wrote:
quoted
Dear List,
we wrote a servlet that is basically a proxy for git-http-backend. We want
to control who can create a new branch. Is there a way to reject a push that
would create a new branch (without using hooks)?
Not sure what else your servlet does or how it affects things but
gitolite has controls to prevent branches being created (among many
many other things, limited mostly by ones imagination!).
Gitolite is normally used with ssh but it has been tested with smart
http also. It itself acts as a proxy for git-http-backend, inspecting
the URI and QUERY_STRING and such animals to decode some things, while
the rest happens via a special update hook that is installed in each
repo that it controls.
(Specifically, the branch create check is done there, not in the part
that is proxying the git-http-backend process. You probably know that
the update hook is invoked by git itself).
Sitaram