vole

Clone

Read only, no credentials:

https://rodent.software/vole.git

Write over SSH with a registered key:

git clone ssh://git@rodent.software:2222/vole.git

A free and open-source forge that lives in your Git repo.

Add the instance access editor and repository danger zone

2973f7274b3c569de6018239ac8c90df98c38a1b · Keenan Nemetz · 15d ago · parent 1948358f

Add the instance access editor and repository danger zone

Instance admins get /admin: a repository list and a per-repository ACL editor for
default role, per-account roles, protected branches, approvals, checks, and
runners. The editor reads repositories directly instead of through the read
rule, because an instance admin may not have a role in the repository they are
administering. Everything else still hides behind a 404.

Repository admins get rename and delete on the settings page behind typed
confirmation. Both go through the instance operations that also move the index,
queue, LFS namespace, and locks, carry CSRF, and are audited.

docs/users-and-access.md +5−3

@@ -154,10 +154,12 @@ vole admin acl default demo read
	154	154	```
	155	155
	156	156	A repository admin can also change the description, default branch, and
	157		visibility from the repository's Settings tab in the browser. Visibility
		157	visibility, and rename or delete the repository, from its Settings tab in
		158	the browser. Visibility
	158	159	toggles the default role between `none` and `read`; explicit role entries are
	159		left alone. Access rules and review policy remain instance-admin operations
	160		(`vole admin acl`).
		160	left alone. Access rules and review policy remain instance-admin operations:
		161	instance admins can edit them in the browser under Admin → Access, or with
		162	`vole admin acl`.
	161	163
	162	164	## Changing access
	163	165