vole

Clone

Read only, no credentials:

https://rodent.software/vole.git

Write over SSH with a registered key:

git clone ssh://git@rodent.software:2222/vole.git

A free and open-source forge that lives in your Git repo.

Add instance-wide roles and refine access UI

5b814e9958090cfd1fa826efb2d375bf613547c1 · Keenan Nemetz · 14d ago · parent 9579c1f9

Add instance-wide roles and refine access UI

Instance roles now live on accounts, apply to public repositories, and the Admin role is the unified instance-admin permission with access to every repository. Repository ACLs can raise an instance role but not lower it.

Adds role assignment to the users UI and CLI, open-registration role config, a reusable role picker, and separates adding a repository account from saving access rules.

docs/architecture.md +1−1

@@ -57,7 +57,7 @@ auditable.
	57	57	\|---\|---\|---\|
	58	58	\| Repositories \| `data/repos/<name>.git` \| It is the source \|
	59	59	\| Issues, requests, approvals, release pointers, CI records \| The `vole` branch in each repository \| It is the source \|
	60		\| Accounts, SSH keys, passkeys, invites, sessions, instance admins, access rules, locks \| `data/users.db` \| No; back it up \|
		60	\| Accounts, instance roles, SSH keys, passkeys, invites, sessions, access rules, locks \| `data/users.db` \| No; back it up \|
	61	61	\| Web/search index \| `data/index.db` \| Yes, with `vole admin index rebuild` \|
	62	62	\| CI queue, run index, contributor CI approvals \| `data/runs.db` \| Partly; in-progress work and approvals are lost \|
	63	63	\| LFS files, CI logs, build artifacts \| `data/lfs/` \| No; stored by content \|