gerrit/gerrit-server/src/main/java/com/google/gerrit/server/workflow
Shawn O. Pearce 6a765190df Move "ref_rights" table into Git
Permissions are stored in the project.config file within the
refs/meta/config branch of each project.  This makes the rules
more flexible in the future, as well as adds version control.

For example:

  [access "refs/*"]
    owner = group tools-owners

  [access "refs/heads/*"]
    label-Verified = -1..+1 group tools-dev
    label-Verified = -1..+1 group tools-owners
    label-Code-Review = -2..+2 group tools-owners
    submit = group tools-dev
    submit = group tools-owners

  [access "refs/heads/stable"]
    exclusiveGroupPermissions = read create push
    read = group Anonymous Users
    push = group tools-repo-maintainer

To enable easy remote editing of the configuration rules, the
following access block is added by default to -- All Projects --
and is thus inherited throughout the entire site:

  [access "refs/meta/config"]
    read = group Project Owners
    push = group Project Owners

This configuration section permits any project owner or site
administrator (as they are indirectly always a project owner of
any project) to push changes to the project.config file within
the refs/meta/config branch, updating access (and other project
information) remotely without using the web UI.

Change-Id: Idb56f657a4bf88108ad40bbb19d831e6806b68c5
Signed-off-by: Shawn O. Pearce <sop@google.com>
2011-05-19 16:53:03 -07:00
..
CategoryFunction.java Move "ref_rights" table into Git 2011-05-19 16:53:03 -07:00
FunctionState.java Move "ref_rights" table into Git 2011-05-19 16:53:03 -07:00
MaxNoBlock.java Add MaxNoBlock category for advisory review levels 2010-01-29 11:56:22 -08:00
MaxWithBlock.java Rewrite our build as modular maven components 2009-11-11 16:54:06 -08:00
NoBlock.java New non-blocking function category "NoBlock" 2010-10-29 15:05:05 -07:00
NoOpFunction.java Rewrite our build as modular maven components 2009-11-11 16:54:06 -08:00