summaryrefslogtreecommitdiff
path: root/skel
diff options
context:
space:
mode:
Diffstat (limited to 'skel')
-rw-r--r--skel/gitano-admin/rules/createrepo.lace2
-rw-r--r--skel/gitano-admin/rules/defines.lace2
-rw-r--r--skel/gitano-admin/rules/project.lace3
3 files changed, 5 insertions, 2 deletions
diff --git a/skel/gitano-admin/rules/createrepo.lace b/skel/gitano-admin/rules/createrepo.lace
index 6807726..7f31d13 100644
--- a/skel/gitano-admin/rules/createrepo.lace
+++ b/skel/gitano-admin/rules/createrepo.lace
@@ -4,8 +4,6 @@
# so this is for non-admins.
# Uncomment the following to allow repositories in personal/username/
-
-# define repo_is_personal repository prefix personal/${user}/
# allow "Personal repo creation is okay" repo_is_personal
# Otherwise the default is that non-admins can't create repositories
diff --git a/skel/gitano-admin/rules/defines.lace b/skel/gitano-admin/rules/defines.lace
index 4e3bb6d..112b442 100644
--- a/skel/gitano-admin/rules/defines.lace
+++ b/skel/gitano-admin/rules/defines.lace
@@ -4,6 +4,8 @@
define is_admin group exact gitano-admin
define is_owner config/project/owner exact ${user}
+define repo_is_personal repository prefix personal/${user}/
+
define if_asanother as_user pattern .
# Self-related operations
diff --git a/skel/gitano-admin/rules/project.lace b/skel/gitano-admin/rules/project.lace
index 26729d6..9d1dc95 100644
--- a/skel/gitano-admin/rules/project.lace
+++ b/skel/gitano-admin/rules/project.lace
@@ -3,6 +3,9 @@
# Admins already got allowed, so this is for non-admin users only
allow "Owners can always read and write" op_is_basic is_owner
+# Uncomment to force read access to repositories in personal/username/
+# allow "Prefix owners can always read and write" repo_is_personal
+
# Uncomment if you want to *force* anonymous access to all but gitano-admin
# allow "Anonymous access always allowed" op_read !is_admin_repo