Backlog
closed
Rui Ferreira
None
2014-03-12
2014-02-03
Micheal Crotty
No
0 up votes | 0 down votes | 0%
5 comments

Hi,

When I create a git repo with no access for anonymous users. (Unauthenticated = X on all permissions) I still get read/clone access.

Steps to reproduce.

Have no permissions for a unauthenticated user.

Execute the following clone command command

GIT_SSL_NO_VERIFY git clone https://mcrotty@opensourceprojects.eu/git/p/pristine/repo

Discussion

  • Micheal Crotty
    Micheal Crotty
    2014-02-03

    Ok found a workaround, the "permissions" setting in the Tools menu. Seems to control which groups can do what, no matter what the "user permissions" page says.

    There is no cross checking, ie.
    1. Tools page gives read permission to unauthenticated.
    2. User permissions indicate no read access for the group unauthenticated.

     
  • Rui Ferreira
    Rui Ferreira
    2014-02-03

    • status: open --> accepted
    • assigned_to: Rui Ferreira
     
  • Rui Ferreira
    Rui Ferreira
    2014-02-03

    Hi Michael

    That is correct. The User permissions setting defines groups and base permissions for the project.

    The permissions options for each tool (if they have it), overrides the behaviour for each tool - i.e. it can add permissions that do not exist in the User permissions tab. In some cases (e.g. tickets) it defines permissions that cannot be defined in the general tab.

    So in a nutshell: the User permissions is general project wide permissions, each tool can override it in its permissions.

    Given the confusion, it is probably best if we update the FAQ to reflect this.

     
  • Rui Ferreira
    Rui Ferreira
    2014-02-19

    • status: accepted --> closed