Add a non_contributor arg to the label predicate

We implement a new arg for the label predicate that works for submit
requirement expressions as follows:
  * label:Code-Review=+2,user=non_contributor

The operator matches with the change if it had a CR+2 vote on the latest
patchset from a gerrit account that's not the uploader, author or
committer of the latest patchset.

--

Why we are adding this arg?

We encountered a use case where users commit code but a bot uploads the
change to gerrit on their behalf. Currently, we only support the
`label:CR+2,user=non_uploader` operator, which in this case will ignore
a CR+2 by the bot but doesn't prevent the actual human author from
+2'ing themselves.

Alternative considered: we considered adding a
`label:CR+2,user=non_committer` but decided not to move with this
alternative. The reason is that a maintainer can easily bypass the CR
requirement by submitting code with a random email address and uploading
it with their gerrit account, hence becoming able to +2 themselves. That
is, it opens the door for unilateral changes.

--

Why implementing as submit-requirement operator only?

For two reasons:
1) This feature was only requested for submit expressions. We doubt that
   this will be valuable for change queries.
2) author/committer are stored in the git commit object and do not
   necessarily need to have a gerrit account associated with them. To
   evaluate the new operator we need to query for an Account ID for the
   author/committer of the change and match them against the label votes
   on the change. The logic for indexed fields is in ChangeField.java
   which does not have access to the account query provider, hence we
   can't easily add this.

Release-Notes: skip
Google-Bug-Id: b/260086939
Change-Id: I13a195b6b6554ccc39dd66101053dfddb8d90053
7 files changed
tree: 82e3d3915f59745b4bb058c92e2f515af92afb77
  1. .settings/
  2. .ts-out/
  3. antlr3/
  4. contrib/
  5. Documentation/
  6. e2e-tests/
  7. java/
  8. javatests/
  9. lib/
  10. modules/
  11. plugins/
  12. polygerrit-ui/
  13. prolog/
  14. prologtests/
  15. proto/
  16. resources/
  17. tools/
  18. webapp/
  19. .bazelignore
  20. .bazelproject
  21. .bazelrc
  22. .bazelversion
  23. .editorconfig
  24. .git-blame-ignore-revs
  25. .gitignore
  26. .gitmodules
  27. .gitreview
  28. .mailmap
  29. .pydevproject
  30. .zuul.yaml
  31. BUILD
  32. COPYING
  33. INSTALL
  34. Jenkinsfile
  35. package.json
  36. README.md
  37. SUBMITTING_PATCHES
  38. version.bzl
  39. web-dev-server.config.mjs
  40. WORKSPACE
  41. yarn.lock
README.md

Gerrit Code Review

Gerrit is a code review and project management tool for Git based projects.

Build Status Maven Central

Objective

Gerrit makes reviews easier by showing changes in a side-by-side display, and allowing inline comments to be added by any reviewer.

Gerrit simplifies Git based project maintainership by permitting any authorized user to submit changes to the master Git repository, rather than requiring all approved changes to be merged in by hand by the project maintainer.

Documentation

For information about how to install and use Gerrit, refer to the documentation.

Source

Our canonical Git repository is located on googlesource.com. There is a mirror of the repository on Github.

Reporting bugs

Please report bugs on the issue tracker.

Contribute

Gerrit is the work of hundreds of contributors. We appreciate your help!

Please read the contribution guidelines.

Note that we do not accept Pull Requests via the Github mirror.

Getting in contact

The Developer Mailing list is repo-discuss on Google Groups.

License

Gerrit is provided under the Apache License 2.0.

Build

Install Bazel and run the following:

    git clone --recurse-submodules https://gerrit.googlesource.com/gerrit
    cd gerrit && bazel build release

Install binary packages (Deb/Rpm)

The instruction how to configure GerritForge/BinTray repositories is here

On Debian/Ubuntu run:

    apt-get update && apt-get install gerrit=<version>-<release>

NOTE: release is a counter that starts with 1 and indicates the number of packages that have been released with the same version of the software.

On CentOS/RedHat run:

    yum clean all && yum install gerrit-<version>[-<release>]

On Fedora run:

    dnf clean all && dnf install gerrit-<version>[-<release>]

Use pre-built Gerrit images on Docker

Docker images of Gerrit are available on DockerHub

To run a CentOS 8 based Gerrit image:

    docker run -p 8080:8080 gerritcodereview/gerrit[:version]-centos8

To run a Ubuntu 20.04 based Gerrit image:

    docker run -p 8080:8080 gerritcodereview/gerrit[:version]-ubuntu20

NOTE: release is optional. Last released package of the version is installed if the release number is omitted.