blob: 98fb02ea096893c6351884d70d58f19809e510f8 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
|
#!/usr/bin/perl
use strict;
use warnings;
# this is hardcoded; change it if needed
use lib "src/lib";
use Gitolite::Test;
# delegation tests -- part 2
# ----------------------------------------------------------------------
try "plan 55";
try "
DEF SP_1 = git add conf ; ok; git commit -m %1; ok; /master.* %1/
DEF SUBCONF_PUSH = SP_1 %2; glt push %1 origin; gsh; /master -> master/
";
confreset;confadd '
# group your projects/repos however you want
@u1r = r1[ab]
@u2r = r2[ab]
@u3r = r3[ab]
# the admin repo access was probably like this to start with:
repo gitolite-admin
RW = u1 u2 u3
RW+ NAME/ = admin
RW NAME/conf/fragments/u1r = u1
RW NAME/conf/fragments/u2r = u2
RW NAME/conf/fragments/u3r = u3
- NAME/ = @all
subconf "fragments/*.conf"
';
try "ADMIN_PUSH set1; !/FATAL/" or die text();
try "mkdir -p conf/fragments; ok";
put "conf/fragments/u1r.conf", '
repo r1a r1b
C = @all
RW+ = CREATOR
repo @u1r
RW+ = tester
';
put "conf/fragments/u2r.conf", '
repo @u2r
C = @all
RW+ = CREATOR
repo @u2r
RW+ = tester
';
put "conf/fragments/u3r.conf", '
repo @u3r
C = @all
RW+ = CREATOR
repo @u3r
RW+ = tester
';
try "ADMIN_PUSH set1; !/FATAL/" or die text();
try "
/Initialized empty Git repository in .*/r1a.git//
/Initialized empty Git repository in .*/r1b.git//
";
# u1 push u1r pass
put "conf/fragments/u1r.conf", '
repo @u1r
RW+ = u5
';
try "SUBCONF_PUSH u1 u1; !/FATAL/" or die text();
# u2 main push fail
confadd '
repo @u1r
RW+ = u6
';
try "SUBCONF_PUSH u2 u2; /FATAL/;
/W VREF/NAME/conf/gitolite.conf gitolite-admin u2 DENIED by VREF/NAME//
";
try "git reset --hard origin/master; ok";
# u2 push u1r fail
put "conf/fragments/u1r.conf", '
repo @u1r
RW+ = u6
';
try "SUBCONF_PUSH u2 u2; /FATAL/
/W VREF/NAME/conf/fragments/u1r.conf gitolite-admin u2 DENIED by VREF/NAME//
";
try "git reset --hard origin/master; ok";
# u3 set perms for r2a fail
put "conf/fragments/u3r.conf", '
repo r2a
RW+ = u6
';
try "SUBCONF_PUSH u3 u3;
/WARNING: subconf 'u3r' attempting to set access for r2a/
";
try "git reset --hard origin/master; ok";
# u3 add r2b to u3r fail
put "conf/fragments/u3r.conf", '
@u3r = r2b
repo @u3r
RW+ = u6
';
try "SUBCONF_PUSH u3 u3
/WARNING: expanding '\@u3r'/
/WARNING: subconf 'u3r' attempting to set access for r2b/
";
|
