Sign in

Search issue titles and bodies, change requests and comments. Private repositories you cannot read are not included.

vole
Clone

Read only, no credentials:

https://rodent.software/vole.git

Write over SSH with a registered key:

git clone ssh://git@rodent.software:2222/vole.git

A free and open-source forge that lives in your Git repo.

Add instance-wide roles and refine access UI

5b814e9958090cfd1fa826efb2d375bf613547c1 · Keenan Nemetz · 14d ago · parent 9579c1f9

Add instance-wide roles and refine access UI

Instance roles now live on accounts, apply to public repositories, and the Admin role is the unified instance-admin permission with access to every repository. Repository ACLs can raise an instance role but not lower it.

Adds role assignment to the users UI and CLI, open-registration role config, a reusable role picker, and separates adding a repository account from saving access rules.

README.md +3−1

@@ -62,7 +62,9 @@ vole admin user create reporter
62 62 ```
63 63
64 64 To let people create their own accounts, set `open_registration = true` alongside
65 an HTTPS `public_url`. New accounts start with no repository-specific access.
65 an HTTPS `public_url`. New accounts start with no repository-specific access; set
66 `open_registration_role = "contribute"` to give them an instance-wide role that
67 applies to every public repository.
66 68
67 69 New repositories are private. If someone opens a private repository on the web,
68 70 they get a `404` — the same answer as a repository that does not exist — so Vole