vole

Clone

Read only, no credentials:

https://rodent.software/vole.git

Write over SSH with a registered key:

git clone ssh://git@rodent.software:2222/vole.git

A free and open-source forge that lives in your Git repo.

Add the instance access editor and repository danger zone

2973f7274b3c569de6018239ac8c90df98c38a1b · Keenan Nemetz · 15d ago · parent 1948358f

Add the instance access editor and repository danger zone

Instance admins get /admin: a repository list and a per-repository ACL editor for
default role, per-account roles, protected branches, approvals, checks, and
runners. The editor reads repositories directly instead of through the read
rule, because an instance admin may not have a role in the repository they are
administering. Everything else still hides behind a 404.

Repository admins get rename and delete on the settings page behind typed
confirmation. Both go through the instance operations that also move the index,
queue, LFS namespace, and locks, carry CSRF, and are audited.

server/web/auth.go +3

@@ -324,6 +324,9 @@ func (w Web) page(r http.Request, title string) Page {
	324	324	if w.devAccount != nil {
	325	325	p.DevLogin = w.devAccount.Name
	326	326	}
		327	if p.LoggedIn && w.Ident != nil {
		328	p.InstanceAdmin = w.Ident.IsAdmin(p.AccountID)
		329	}
	327	330	if p.LoggedIn && w.Repos != nil {
	328	331	if name := r.PathValue("name"); name != "" {
	329	332	if m, err := w.Repos.Open(name); err == nil {