vole

Clone

Read only, no credentials:

https://rodent.software/git/vole.git

Write over SSH with a registered key:

git clone ssh://git@0.0.0.0:2222/vole.git

A free and open-source forge that lives in your Git repo.

Let instance admins read every repository

381d6aac38ab785d879fa82a6b8397ce6f543bab · Keenan Nemetz · 14d ago · parent 074ae160

Let instance admins read every repository

An instance administrator can already rewrite any repository's ACL, so hiding its content only hides what they govern. Raise them to at least read in the web and SSH paths, preserving any higher explicit role, and enforce the read rule on SSH upload-pack, where any authenticated key could previously clone a private repository by name. Anonymous HTTP clone still answers 404 because it carries no identity.

Group the admin surface into Repositories and Users tabs with a shared header, and teach Page.Section to mark the active tab.

docs/ui-plan.md +4−3

@@ -205,9 +205,10 @@ visibility, danger zone). Every admin write uses the existing stores, CSRF, and
	205	205	the audit log; the web is a second surface over the same operations, not a
	206	206	second implementation.
	207	207
	208		The web admin covers all of the operations above: repository create, the
	209		per-repository ACL editor, rename/delete, and users with their keys, sessions,
	210		and enrollment links.
		208	The web admin is one surface at `/admin`, with `Repositories` and `Users` tabs.
		209	Repository creation and the per-repository ACL editor live under Repositories;
		210	account detail and enrollment links live under Users. Repository settings that
		211	belong to a repository's own admins stay on that repository's Settings tab.
	211	212
	212	213	## Icons
	213	214