{"thread":{"id":"24771","subject":"limiting ref visibility to specific users","startedAt":"2010-08-17T15:09:21Z","lastAt":"2010-08-17T16:55:26Z","messageCount":3,"participants":["Enrico Weigelt","Sverre Rabbelier","Shawn Pearce"],"isPatch":false,"patchVersion":null,"patchTotal":null},"messages":[{"id":"148281","messageId":"20100817150921.GB12682@nibiru.local","threadId":"24771","inReplyTo":null,"subject":"limiting ref visibility to specific users","fromName":"Enrico Weigelt","fromEmail":"weigelt@metux.de","sentAt":"2010-08-17T15:09:21Z","receivedAt":"2010-08-17T15:09:21Z","isPatch":false,"sender":{"key":"weigelt@metux.de","avatar":null},"body":"Hi folks,\n\n\nI'd like to control which refs are visible to certain users\n(when coming via ssh). Is there already some generic way to\ndo that (eg. passing some filter rule by a calling wrapper ?)\n\n\ncu\n-- \n----------------------------------------------------------------------\n Enrico Weigelt, metux IT service -- http://www.metux.de/\n\n phone:  +49 36207 519931  email: weigelt@metux.de\n mobile: +49 151 27565287  icq:   210169427         skype: nekrad666\n----------------------------------------------------------------------\n Embedded-Linux / Portierung / Opensource-QM / Verteilte Systeme\n----------------------------------------------------------------------\n"},{"id":"148282","messageId":"AANLkTikbT+e+7+LxrP6TkuuQ=8rMxuTnvFcUbUFzaUgk@mail.gmail.com","threadId":"24771","inReplyTo":"20100817150921.GB12682@nibiru.local","subject":"Re: limiting ref visibility to specific users","fromName":"Sverre Rabbelier","fromEmail":"srabbelier@gmail.com","sentAt":"2010-08-17T15:48:47Z","receivedAt":"2010-08-17T15:48:47Z","isPatch":false,"sender":{"key":"srabbelier@gmail.com","avatar":"https://avatars.githubusercontent.com/u/3098?v=4"},"body":"Heya,\n\nOn Tue, Aug 17, 2010 at 10:09, Enrico Weigelt <weigelt@metux.de> wrote:\n> I'd like to control which refs are visible to certain users\n> (when coming via ssh). Is there already some generic way to\n> do that (eg. passing some filter rule by a calling wrapper ?)\n\nShawn, weren't you looking into something similar for Gerrit? Although\nI think what you were investigating would allow the user to get the\nrest of the refs somehow?\n\n-- \nCheers,\n\nSverre Rabbelier\n"},{"id":"148290","messageId":"AANLkTi=aSwu0JttExA8CN=2GhFYwt10+cCvUR77jibmj@mail.gmail.com","threadId":"24771","inReplyTo":"AANLkTikbT+e+7+LxrP6TkuuQ=8rMxuTnvFcUbUFzaUgk@mail.gmail.com","subject":"Re: limiting ref visibility to specific users","fromName":"Shawn Pearce","fromEmail":"spearce@spearce.org","sentAt":"2010-08-17T16:55:26Z","receivedAt":"2010-08-17T16:55:26Z","isPatch":false,"sender":{"key":"spearce@spearce.org","avatar":"https://avatars.githubusercontent.com/u/34844?v=4"},"body":"On Tue, Aug 17, 2010 at 8:48 AM, Sverre Rabbelier <srabbelier@gmail.com> wrote:\n> On Tue, Aug 17, 2010 at 10:09, Enrico Weigelt <weigelt@metux.de> wrote:\n>> I'd like to control which refs are visible to certain users\n>> (when coming via ssh). Is there already some generic way to\n>> do that (eg. passing some filter rule by a calling wrapper ?)\n>\n> Shawn, weren't you looking into something similar for Gerrit? Although\n> I think what you were investigating would allow the user to get the\n> rest of the refs somehow?\n\nYup.  We implemented this in JGit by allowing the application to\nprovide an implementation of a RefFilter interface, only the refs that\nthe filter approves are shown to the remote client.  During\nreceive-pack (server side of push) the RefFilter also is used to\nrestrict what objects the client may mention as a delta base, or as an\nobject in the graph (e.g. commit parent, commit root tree, or tree\nentry member).\n\nThere is no equivalent in C Git.  You have to use either Gerrit Code\nReview, or build your own server on top of JGit to take advantage of\nthat feature.\n\n-- \nShawn.\n"}]}