Sign in

Search issue titles and bodies, change requests and comments. Private repositories you cannot read are not included.

vole
Clone

Read only, no credentials:

https://rodent.software/vole.git

Write over SSH with a registered key:

git clone ssh://git@rodent.software:2222/vole.git

A free and open-source forge that lives in your Git repo.

Add instance-wide roles and refine access UI

5b814e9958090cfd1fa826efb2d375bf613547c1 · Keenan Nemetz · 14d ago · parent 9579c1f9

Add instance-wide roles and refine access UI

Instance roles now live on accounts, apply to public repositories, and the Admin role is the unified instance-admin permission with access to every repository. Repository ACLs can raise an instance role but not lower it.

Adds role assignment to the users UI and CLI, open-registration role config, a reusable role picker, and separates adding a repository account from saving access rules.

server/auth_test.go +2−2

@@ -306,7 +306,7 @@ func TestContributorNamespaceAndRequestUseTheAccountName(t *testing.T) {
306 306 if err != nil {
307 307 t.Fatal(err)
308 308 }
309 if err := a.SetEntry(contrib.Name, "contributor"); err != nil {
309 if err := a.SetEntry(contrib.Name, "contribute"); err != nil {
310 310 t.Fatal(err)
311 311 }
312 312 if err := m.SetACL(a, "test"); err != nil {
@@ -387,7 +387,7 @@ func TestContributorCIIsHeldUntilWriterAllows(t *testing.T) {
387 387 if err != nil {
388 388 t.Fatal(err)
389 389 }
390 if err := a.SetEntry(contrib.Name, "contributor"); err != nil {
390 if err := a.SetEntry(contrib.Name, "contribute"); err != nil {
391 391 t.Fatal(err)
392 392 }
393 393 if err := m.SetACL(a, "test"); err != nil {