# limiting ref visibility to specific users 3 messages from 2010-08-17 to 2010-08-17. Participants: Enrico Weigelt, Sverre Rabbelier, Shawn Pearce. Thread: https://gitlist.dev/t/24771 ## Enrico Weigelt, 2010-08-17 15:09 Subject: limiting ref visibility to specific users Message-ID: <20100817150921.GB12682@nibiru.local> URL: https://gitlist.dev/e/20100817150921.GB12682%40nibiru.local ``` Hi folks, I'd like to control which refs are visible to certain users (when coming via ssh). Is there already some generic way to do that (eg. passing some filter rule by a calling wrapper ?) cu -- ---------------------------------------------------------------------- Enrico Weigelt, metux IT service -- http://www.metux.de/ phone: +49 36207 519931 email: weigelt@metux.de mobile: +49 151 27565287 icq: 210169427 skype: nekrad666 ---------------------------------------------------------------------- Embedded-Linux / Portierung / Opensource-QM / Verteilte Systeme ---------------------------------------------------------------------- ``` ## Sverre Rabbelier, 2010-08-17 15:48 Subject: Re: limiting ref visibility to specific users Message-ID: URL: https://gitlist.dev/e/AANLkTikbT%2Be%2B7%2BLxrP6TkuuQ%3D8rMxuTnvFcUbUFzaUgk%40mail.gmail.com In-Reply-To: <20100817150921.GB12682@nibiru.local> ``` Heya, On Tue, Aug 17, 2010 at 10:09, Enrico Weigelt wrote: > I'd like to control which refs are visible to certain users > (when coming via ssh). Is there already some generic way to > do that (eg. passing some filter rule by a calling wrapper ?) Shawn, weren't you looking into something similar for Gerrit? Although I think what you were investigating would allow the user to get the rest of the refs somehow? -- Cheers, Sverre Rabbelier ``` ## Shawn Pearce, 2010-08-17 16:55 Subject: Re: limiting ref visibility to specific users Message-ID: URL: https://gitlist.dev/e/AANLkTi%3DaSwu0JttExA8CN%3D2GhFYwt10%2BcCvUR77jibmj%40mail.gmail.com In-Reply-To: ``` On Tue, Aug 17, 2010 at 8:48 AM, Sverre Rabbelier wrote: > On Tue, Aug 17, 2010 at 10:09, Enrico Weigelt wrote: >> I'd like to control which refs are visible to certain users >> (when coming via ssh). Is there already some generic way to >> do that (eg. passing some filter rule by a calling wrapper ?) > > Shawn, weren't you looking into something similar for Gerrit? Although > I think what you were investigating would allow the user to get the > rest of the refs somehow? Yup. We implemented this in JGit by allowing the application to provide an implementation of a RefFilter interface, only the refs that the filter approves are shown to the remote client. During receive-pack (server side of push) the RefFilter also is used to restrict what objects the client may mention as a delta base, or as an object in the graph (e.g. commit parent, commit root tree, or tree entry member). There is no equivalent in C Git. You have to use either Gerrit Code Review, or build your own server on top of JGit to take advantage of that feature. -- Shawn. ```