gitblit icon indicating copy to clipboard operation
gitblit copied to clipboard

LDAP/AD allow setting default roles like #create

Open gitblit opened this issue 10 years ago • 5 comments

Originally reported on Google Code with ID 435

What steps will reproduce the problem?
1. set git.defaultAuthorizationControl = AUTHENTICATED in gitblit.properties.
2. Login as a AD user (previously non-existant in blit) in blit web UI.
3. Try to look for "create new repository" function.

What is the expected output? What do you see instead?
No create new repository functionality seems to be available.

What version of the product are you using? On what operating system?
Blit 1.5.0 WAR on Windows tomcat.

Please provide any additional information below.

This might not be a real bug.. but I just could not figure out how can the AD authenticated
user can create new repository without administrator's intervention. The 'git.defaultAuthorizationControl'
property seems like the key .. but changing from NAMED to AUTHENTICATED did not bring
any  perceivable change.

Reported by dharapvj on 2014-05-23 09:16:14

gitblit avatar Aug 12 '15 12:08 gitblit

They can't.  You'll have to manually edit the user object and check the create personal
repositories checkbox.

git.defaultAuthorizationControl is for git repository transport authorization, not
for repo creation.

Reported by James.Moger on 2014-05-23 11:56:17

gitblit avatar Aug 12 '15 12:08 gitblit

Hi James, thanks for the reply.

Can I know the reason for such design decision? This way, as an Administrator, I must
edit every AD user before they can start using the blit as their own personal repository.

Would you consider such setting be allowed as "opt-in" user setting in blit.properties
as a feature request? 

As an administrator, I would like to have the end users direct access to create the
personal repositories as long as they are authenticated.

Reported by dharapvj on 2014-05-25 06:10:34

gitblit avatar Aug 12 '15 12:08 gitblit

It wasn't a decision, it was an omission.  There should be a setting to enable this,
by default, for all users.

Reported by James.Moger on 2014-05-27 01:14:00

gitblit avatar Aug 12 '15 12:08 gitblit

Hi James, any love to this request in upcoming releases?

Reported by dharapvj on 2014-10-22 09:48:24

gitblit avatar Aug 12 '15 12:08 gitblit

I must have overlooked this because of the title.

One of the primary improvements to 1.7.0 will be overhauling ownership/admin powers.
 I'll try to remember to include this request in that effort.

Reported by James.Moger on 2014-10-22 12:12:53

  • Status changed: Accepted
  • Labels added: Milestone-1.7.0

gitblit avatar Aug 12 '15 12:08 gitblit