How can I permit a non-admin user to remove verification by Jenkins )Non-Interactive user).

743 views
Skip to first unread message

Gaurav Negi

unread,
Apr 28, 2016, 2:29:35 PM4/28/16
to Repo and Gerrit Discussion
Dear All,
    If there a way I can give a non-admin group permission to remove Verified label by Jenkins user?
I am using Gerrit 2.11.

Thanks
-Gaurav

Doug Kelly

unread,
Apr 28, 2016, 4:59:58 PM4/28/16
to Repo and Gerrit Discussion
Yes, add the group to the "Remove Reviewer" permission.

Note, they'll be able to remove *any* votes; not just votes by Jenkins, so I would suggest guarding this permission carefully. 

Gaurav Negi

unread,
May 9, 2016, 12:33:39 PM5/9/16
to Repo and Gerrit Discussion
Dear Gerrit experts,
   Can you please answer this?

I have verification by Jenkins added to a repo.
In some rare cases, I want to give some users (nonadmin users, tech leads users), verification access, so that they can kill jenkin sverification and give their own, so the commit to go through.

I created a new group for that and gave that group Verification access. However that group is not able to remove the verification by Jenkins, that way the commit is not going through.

Can anyone please suggest, whats the solution for this, other than giving admin access to those users?

Thanks
-Gaurav

Andrew Grimberg

unread,
May 9, 2016, 12:36:00 PM5/9/16
to Gaurav Negi, Repo and Gerrit Discussion
Gaurav,

To the best of my knowledge that right is only granted to project owners
and Gerrit administrators.

-Andy-

signature.asc

Marcelo Ávila de Oliveira

unread,
May 9, 2016, 1:35:40 PM5/9/16
to Andrew Grimberg, Gaurav Negi, Repo and Gerrit Discussion
What about to change from "function = MaxWithBlock" to "function = MaxNoBlock" in the "Verification" label configuration?


--
Marcelo Ávila de Oliveira

Björn Pedersen

unread,
May 10, 2016, 3:49:10 AM5/10/16
to Repo and Gerrit Discussion

Hi,

to remove a vote you need to grant the "Remove Reviewer" permission.

Alternativly you can grant the "Verify(on behalf of)"  permission, then they can vote in the name of jenkins (via rest api only)

Björn

Reply all
Reply to author
Forward
0 new messages