Re: Restricted git push ?

From: J. Bakshi <joydeep@infoservices.in>
Date: Jul 19, 2011, 10:33 UTC
Message-ID: <20110719160311.10f2364d@shiva.selfip.org>
In-Reply-To: <CAMK1S_jsv-pFy6bNPG=EK=4YsJOh3GUZ+_DAq6n36ajWuhyNaQ@mail.gmail.com>

On Tue, 19 Jul 2011 15:35:42 +0530 Sitaram Chamarty <sitaramc@gmail.com> wrote:

Show 10 quoted lines

> On Tue, Jul 19, 2011 at 3:06 PM, J. Bakshi <joydeep@infoservices.in> wrote:
> > Hello list,
> >
> > I have installed git repo based on http://  protocol and both read+write access is based on a htpasswd based authentication. The git repo is "bare" so that push is possible. But I like to have push from a limited users only, not from all. For the rest, only pull should be possible. Is there any way to achieve this type of ACL ?
> 
> man git-http-backend has an example config described thus:  "To enable
> anonymous read access but authenticated write access...".  It
> certainly sounds like what you want.
> 
> Not sure what sort of http access you have setup

I have

`````````` <Location /git> AuthType Basic # Message to give to the committer AuthName "Write access requires a password" # File listing users with write (commit) access AuthUserFile /home/svn/PASSWD Require valid-user </Location> ``````````

So authentication is require forman git-http-backend both read and write. Now to use one more level to restrict push user I have added one more restriction like

<LocationMatch "^/git/.*/git-receive-pack$"> AuthType Basic # Message to give to the committer AuthName "Write access requires a password" # File listing users with write (commit) access AuthUserFile /home/git/pushACL Require valid-user </LocationMatch>

read access is working fine, but write access not. log reports

````````
 user testuser not found: /git/web.git/info/refs
``````````

Don't know why it is searching at /git/web.git/info/refs !!