Dear List,
we wrote a servlet that is basically a proxy for git-http-backend. We want to control who can create a new branch. Is there a way to reject a push that would create a new branch (without using hooks)?
Thanks in advance, Ákos Tajti
Shawn PearceRe: git-smart-http reject push
On Thu, May 31, 2012 at 1:38 PM, Tajti Ákos <akos.tajti@intland.com> wrote:
> we wrote a servlet that is basically a proxy for git-http-backend. We want > to control who can create a new branch. Is there a way to reject a push that > would create a new branch (without using hooks)?
Not easily. Is the servlet in Java? You might want to consider just embedding JGit[1] and using that. JGit will let your servlet install an implementation of its PreReceiveHook interface where you can inspect the parsed protocol data, decide what to do, and reject it or allow it through.
To reject before it makes it to git-http-backend you need to parse the incoming data stream, decode the commands, and then forward the unparsed stream to git-http-backend. If you are in Java you might be able to reuse some of the JGit classes to help you parse the protocol. Maybe. Those classes weren't really built to be used on their own.
[1] http://www.eclipse.org/jgit/
Sitaram ChamartyRe: git-smart-http reject push
On Fri, Jun 1, 2012 at 2:08 AM, Tajti Ákos <akos.tajti@intland.com> wrote:
Show 5 quoted lines
> Dear List, > > we wrote a servlet that is basically a proxy for git-http-backend. We want > to control who can create a new branch. Is there a way to reject a push that > would create a new branch (without using hooks)?
Not sure what else your servlet does or how it affects things but gitolite has controls to prevent branches being created (among many many other things, limited mostly by ones imagination!).
Gitolite is normally used with ssh but it has been tested with smart http also. It itself acts as a proxy for git-http-backend, inspecting the URI and QUERY_STRING and such animals to decode some things, while the rest happens via a special update hook that is installed in each repo that it controls.
(Specifically, the branch create check is done there, not in the part that is proxying the git-http-backend process. You probably know that the update hook is invoked by git itself).
Sitaram
Re: git-smart-http reject push
Thanks for the answers!
Ákos
2012.06.01. 5:53 keltezéssel, Sitaram Chamarty írta:
Show 21 quoted lines
> On Fri, Jun 1, 2012 at 2:08 AM, Tajti Ákos<akos.tajti@intland.com> wrote: >> Dear List, >> >> we wrote a servlet that is basically a proxy for git-http-backend. We want >> to control who can create a new branch. Is there a way to reject a push that >> would create a new branch (without using hooks)? > Not sure what else your servlet does or how it affects things but > gitolite has controls to prevent branches being created (among many > many other things, limited mostly by ones imagination!). > > Gitolite is normally used with ssh but it has been tested with smart > http also. It itself acts as a proxy for git-http-backend, inspecting > the URI and QUERY_STRING and such animals to decode some things, while > the rest happens via a special update hook that is installed in each > repo that it controls. > > (Specifically, the branch create check is done there, not in the part > that is proxying the git-http-backend process. You probably know that > the update hook is invoked by git itself). > > Sitaram