Sign in

Search issue titles and bodies, change requests and comments. Private repositories you cannot read are not included.

vole
Clone

Read only, no credentials:

https://rodent.software/vole.git

Write over SSH with a registered key:

git clone ssh://git@rodent.software:2222/vole.git

A free and open-source forge that lives in your Git repo.

Fold admin work into repository settings and a Users page

9579c1f976254fdeb2ec73d4016db5b25c7921c1 · Keenan Nemetz · 14d ago · parent 381d6aac

Fold admin work into repository settings and a Users page

Remove the combined /admin tabs. Per-repository access rules now live on the repository's Settings page, visible to instance admins while repository details and the danger zone stay with repository admins. User management moves to /users, linked from the top navigation only for instance admins, and repository creation moves to /repos/new. Align the invite, danger-zone, and settings forms with the shared card-and-actions layout, and make settings section headings consistent.

docs/users-and-access.md +7−6

@@ -118,11 +118,12 @@ push, comment, or repository-settings rights, which still need the matching ACL
118 118 role. SSH Git and SSH LFS use the key's account for this check; anonymous HTTP
119 119 clone has no identity, so a private repository still answers `404` there.
120 120
121 Instance admins also get an **Admin** section in the browser. It covers
122 repository creation and per-repository access rules, plus accounts: create an
123 account from an enrollment link, grant or revoke instance admin, retire an
124 account, start a fresh enrollment link, and inspect or revoke SSH keys and
125 browser sessions.
121 Instance admins also get a **Users** page in the top navigation. It covers
122 accounts: create an account from an enrollment link, grant or revoke instance
123 admin, retire an account, start a fresh enrollment link, and inspect or revoke
124 SSH keys and browser sessions. Repository creation is a **New repository** action
125 on the home page, and per-repository access rules live on that repository's
126 **Settings** tab, visible there to instance admins.
126 127
127 128 The first instance admin must be granted on the host. Vole refuses to remove or
128 129 retire the last active instance admin, so a remote mistake cannot lock everyone
@@ -163,7 +164,7 @@ visibility, and rename or delete the repository, from its **Settings** tab in
163 164 the browser. Visibility
164 165 toggles the default role between `none` and `read`; explicit role entries are
165 166 left alone. Access rules and review policy remain instance-admin operations:
166 instance admins can edit them in the browser under **Admin → Access**, or with
167 instance admins can edit them on the repository's **Settings** tab, or with
167 168 `vole admin acl`.
168 169
169 170 ## Changing access