git-smart-http reject push

4 messages, 3 authors, 2016-06-15 · open the first message on its own page

git-smart-http reject push

From: Tajti Ákos <hidden>
Date: 2016-06-15 22:53:57

Dear List,

we wrote a servlet that is basically a proxy for git-http-backend. We 
want to control who can create a new branch. Is there a way to reject a 
push that would create a new branch (without using hooks)?

Thanks in advance,
Ákos Tajti

Re: git-smart-http reject push

From: Shawn Pearce <hidden>
Date: 2016-06-15 22:53:57

On Thu, May 31, 2012 at 1:38 PM, Tajti Ákos [off-list ref] wrote:
we wrote a servlet that is basically a proxy for git-http-backend. We want
to control who can create a new branch. Is there a way to reject a push that
would create a new branch (without using hooks)?
Not easily. Is the servlet in Java? You might want to consider just
embedding JGit[1] and using that. JGit will let your servlet install
an implementation of its PreReceiveHook interface where you can
inspect the parsed protocol data, decide what to do, and reject it or
allow it through.

To reject before it makes it to git-http-backend you need to parse the
incoming data stream, decode the commands, and then forward the
unparsed stream to git-http-backend. If you are in Java you might be
able to reuse some of the JGit classes to help you parse the protocol.
Maybe. Those classes weren't really built to be used on their own.

[1] http://www.eclipse.org/jgit/

Re: git-smart-http reject push

From: Sitaram Chamarty <hidden>
Date: 2016-06-15 22:53:57

On Fri, Jun 1, 2012 at 2:08 AM, Tajti Ákos [off-list ref] wrote:
Dear List,

we wrote a servlet that is basically a proxy for git-http-backend. We want
to control who can create a new branch. Is there a way to reject a push that
would create a new branch (without using hooks)?
Not sure what else your servlet does or how it affects things but
gitolite has controls to prevent branches being created (among many
many other things, limited mostly by ones imagination!).

Gitolite is normally used with ssh but it has been tested with smart
http also.  It itself acts as a proxy for git-http-backend, inspecting
the URI and QUERY_STRING and such animals to decode some things, while
the rest happens via a special update hook that is installed in each
repo that it controls.

(Specifically, the branch create check is done there, not in the part
that is proxying the git-http-backend process.  You probably know that
the update hook is invoked by git itself).

Sitaram

Re: git-smart-http reject push

From: Tajti Ákos <hidden>
Date: 2016-06-15 22:53:57

Thanks for the answers!

Ákos

2012.06.01. 5:53 keltezéssel, Sitaram Chamarty írta:
On Fri, Jun 1, 2012 at 2:08 AM, Tajti Ákos[off-list ref]  wrote:
quoted
Dear List,

we wrote a servlet that is basically a proxy for git-http-backend. We want
to control who can create a new branch. Is there a way to reject a push that
would create a new branch (without using hooks)?
Not sure what else your servlet does or how it affects things but
gitolite has controls to prevent branches being created (among many
many other things, limited mostly by ones imagination!).

Gitolite is normally used with ssh but it has been tested with smart
http also.  It itself acts as a proxy for git-http-backend, inspecting
the URI and QUERY_STRING and such animals to decode some things, while
the rest happens via a special update hook that is installed in each
repo that it controls.

(Specifically, the branch create check is done there, not in the part
that is proxying the git-http-backend process.  You probably know that
the update hook is invoked by git itself).

Sitaram
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help