diff options
Diffstat (limited to 'skel')
-rw-r--r-- | skel/gitano-admin/rules/createrepo.lace | 2 | ||||
-rw-r--r-- | skel/gitano-admin/rules/defines.lace | 2 | ||||
-rw-r--r-- | skel/gitano-admin/rules/project.lace | 3 |
3 files changed, 5 insertions, 2 deletions
diff --git a/skel/gitano-admin/rules/createrepo.lace b/skel/gitano-admin/rules/createrepo.lace index 6807726..7f31d13 100644 --- a/skel/gitano-admin/rules/createrepo.lace +++ b/skel/gitano-admin/rules/createrepo.lace @@ -4,8 +4,6 @@ # so this is for non-admins. # Uncomment the following to allow repositories in personal/username/ - -# define repo_is_personal repository prefix personal/${user}/ # allow "Personal repo creation is okay" repo_is_personal # Otherwise the default is that non-admins can't create repositories diff --git a/skel/gitano-admin/rules/defines.lace b/skel/gitano-admin/rules/defines.lace index 4e3bb6d..112b442 100644 --- a/skel/gitano-admin/rules/defines.lace +++ b/skel/gitano-admin/rules/defines.lace @@ -4,6 +4,8 @@ define is_admin group exact gitano-admin define is_owner config/project/owner exact ${user} +define repo_is_personal repository prefix personal/${user}/ + define if_asanother as_user pattern . # Self-related operations diff --git a/skel/gitano-admin/rules/project.lace b/skel/gitano-admin/rules/project.lace index 26729d6..9d1dc95 100644 --- a/skel/gitano-admin/rules/project.lace +++ b/skel/gitano-admin/rules/project.lace @@ -3,6 +3,9 @@ # Admins already got allowed, so this is for non-admin users only allow "Owners can always read and write" op_is_basic is_owner +# Uncomment to force read access to repositories in personal/username/ +# allow "Prefix owners can always read and write" repo_is_personal + # Uncomment if you want to *force* anonymous access to all but gitano-admin # allow "Anonymous access always allowed" op_read !is_admin_repo |