Assigned
Status Update
No update yet.
Comments
pa...@myitcv.org.uk
Stepping back from the specifics of refs/meta/config, I wonder if there is perhaps a more general solution here.
Could access control specifications be used to determine if something should be mirrored or not?
For example, we lock down refs/meta/config, but all other refs are readable by Anonymous Users.
So it could be that only those refs which are readable by Anonymous Users should be mirrored.
Could access control specifications be used to determine if something should be mirrored or not?
For example, we lock down refs/meta/config, but all other refs are readable by Anonymous Users.
So it could be that only those refs which are readable by Anonymous Users should be mirrored.
pa...@myitcv.org.uk
Oooh very interesting. This seems like exactly what we need/want. Would this also allow us to configure which refs are force-pushed?
If this would work for us, please can you point me towards where we can configure this for ourselves?
Thanks very much!
If this would work for us, please can you point me towards where we can configure this for ourselves?
Thanks very much!
is...@google.com
Edits were made to reflect the following in Monorail: auto-CCs.
Description
GerritHub/GitHub username: myitcv
GerritHub/GitHub projects names: cue-unity/unity
Full URL exhibiting the problem:https://github.com/cue-unity/unity (the original GitHub project)
Expected behavior: refs/meta/config is not replicated to GitHub. i.e. the last command in the sequence should fail:
cd $(mktemp -d)https://github.com/cue-unity/unity
git clone
cd unity
git fetch origin refs/meta/config
Observed behavior:
The command sequence above succeeds.
This means that config settings can leak via GitHub (because the access controls on GerritHub do not apply on GitHub). This was manually fixed for cue-lang/cue (thank you!) but it seems a sensible default to never replicate config.
Timestamp when the error occurred (include timezone): 2022/07/19 05:24 UTC.
Has this worked before? If yes, when? N/a. This is a newly imported project into GerritHub.
If applicable: screenshot of erroneous UI element: n/a
If applicable: JavaScript console log (chrome: F12 > Console): n/a
If applicable: Browser (name, version, operating system) n/a
If using git command-line: output of "which git && git --version"
git version 2.37.1.116.g9dd64cb4d3