| commit | 3889cceabec65fb8d1134431aa40083ae5291ece | [log] [tgz] |
|---|---|---|
| author | Youssef Elghareeb <ghareeb@google.com> | Tue Nov 10 15:50:38 2020 +0100 |
| committer | Youssef Elghareeb <ghareeb@google.com> | Fri Dec 11 14:36:42 2020 +0100 |
| tree | 9f6b0a1ce6b82f0daa922af4d1458257bcdef496 | |
| parent | 7164b9485cbd2ea88f7b1e83a7b7ab6e721faf44 [diff] |
Change the default permissions from READ on refs/* to refs/heads/* The default permissions are initialized on "All-Projects" creation. This currently grants the following access permissions on refs/*: [access "refs/*"] read = group Administrators read = group Anonymous Users revert = group Registered Users This change modifies these default permissions and moves the second and third rows to the refs/heads/* section instead. [access "refs/*"] read = group Administrators [access "refs/heads/*"] read = group Anonymous Users revert = group Registered Users With this change, refs/draft-comments, refs/starred-changes and refs/meta/version are not accessible anymore. For the first two, I modified the code so that they are implicitly visible to all users. This won't hurt since we only allow access to the refs belonging to the calling user (e.g. a user cannot view drafts of another user). For refs/meta/version, I added a section for it in All-Projects initialization, such that anonymous users are granted read access. In the future, we can remove visibility to refs/draft-comments and refs/starred-changes since they are not actually needed. We keep them in this change to preserve the current behavior for refs visibility. Change-Id: I770cd11f10cfb369abe00d34fe9a3287bdf62cfa
Gerrit is a code review and project management tool for Git based projects.
Gerrit makes reviews easier by showing changes in a side-by-side display, and allowing inline comments to be added by any reviewer.
Gerrit simplifies Git based project maintainership by permitting any authorized user to submit changes to the master Git repository, rather than requiring all approved changes to be merged in by hand by the project maintainer.
For information about how to install and use Gerrit, refer to the documentation.
Our canonical Git repository is located on googlesource.com. There is a mirror of the repository on Github.
Please report bugs on the issue tracker.
Gerrit is the work of hundreds of contributors. We appreciate your help!
Please read the contribution guidelines.
Note that we do not accept Pull Requests via the Github mirror.
The Developer Mailing list is repo-discuss on Google Groups.
Gerrit is provided under the Apache License 2.0.
Install Bazel and run the following:
git clone --recurse-submodules https://gerrit.googlesource.com/gerrit
cd gerrit && bazel build release
The instruction how to configure GerritForge/BinTray repositories is here
On Debian/Ubuntu run:
apt-get update & apt-get install gerrit=<version>-<release>
NOTE: release is a counter that starts with 1 and indicates the number of packages that have been released with the same version of the software.
On CentOS/RedHat run:
yum clean all && yum install gerrit-<version>[-<release>]
On Fedora run:
dnf clean all && dnf install gerrit-<version>[-<release>]
Docker images of Gerrit are available on DockerHub
To run a CentOS 8 based Gerrit image:
docker run -p 8080:8080 gerritcodereview/gerrit[:version]-centos8
To run a Ubuntu 20.04 based Gerrit image:
docker run -p 8080:8080 gerritcodereview/gerrit[:version]-ubuntu20
NOTE: release is optional. Last released package of the version is installed if the release number is omitted.