2.15: Owner cannot create branch in UI, error 403

Leoš Junek

unread,

Apr 26, 2018, 8:18:58 AM4/26/18

to Repo and Gerrit Discussion

Hello,

I have upgraded from Gerrit 2.10.2 to 2.15. Now I cannot create brach in UI in projects with code review set. No problem with projects without code-review. I am getting

---- Code Review - Error ---

403 create not permitted for refs/heads/feature

---------------------------------------------------------------

but nothing is logged into rewiew_site/logs/*

Details are provided below. Do you have any idea, where the problem is, what should be set to allow branch creation in web UI?

It doesn´t work in old UI and in new UI either.

Regards

Leos

==================================

Details:

I am a member of group "portal-mpsv"

Here are permissions:

Reference: refs/for/*

Push Merge Commit -- portal-mpsv

Reference: refs/heads/*

Owner -- portal-mpsv

Label Code-Review -- portal-mpsv

Label Verified -- portal-mpsv

Submit -- portal-mpsv

Reference: refs/tags/*

Create Reference -- portal-mpsv

Create Annotated Tag -- portal-mpsv

Push -- portal-mpsv

Reference: refs/heads/release

Push -- portal-mpsv

Duft Markus

unread,

Apr 26, 2018, 8:25:14 AM4/26/18

to Leoš Junek, Repo and Gerrit Discussion

Hey,

It seems that the user is lacking the Create Reference permission on “refs/heads/feature” – or refs/heads/* J Except maybe if you inherit that permission from the parent project.

Cheers,

Markus

--
--
To unsubscribe, email repo-discuss...@googlegroups.com
More info at http://groups.google.com/group/repo-discuss?hl=en

---
You received this message because you are subscribed to the Google Groups "Repo and Gerrit Discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to repo-discuss...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Leoš Junek

unread,

Apr 26, 2018, 8:53:44 AM4/26/18

to Repo and Gerrit Discussion

Hi Markus,

thanks. But I have completely same rights set on 2.12.2 server and it works. In 2.15 it doesn´t. Do I really need Create Reference permissions if I want to create branch in webUI and I am a master?

Leoš

Dne čtvrtek 26. dubna 2018 14:25:14 UTC+2 Markus Duft napsal(a):

--
--
To unsubscribe, email repo-discus...@googlegroups.com

More info at http://groups.google.com/group/repo-discuss?hl=en

---
You received this message because you are subscribed to the Google Groups "Repo and Gerrit Discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to repo-discuss...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Duft Markus

unread,

Apr 26, 2018, 8:58:03 AM4/26/18

to Leoš Junek, Repo and Gerrit Discussion

I think so, yes. Not sure, I’m just a user as well J

--
--
To unsubscribe, email repo-discuss...@googlegroups.com

More info at http://groups.google.com/group/repo-discuss?hl=en

---
You received this message because you are subscribed to the Google Groups "Repo and Gerrit Discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to repo-discuss...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Message has been deleted

Leoš Junek

unread,

Apr 26, 2018, 9:03:09 AM4/26/18

to Repo and Gerrit Discussion

Let me correct my last answer ...

Do I really need Create Reference permission in code-review project, when I already have permission Owner? When having Create Reference permission I can bypass code-review and it´s not desired.

Since 2.12.2 version I was able to create branch in web UI with rights mentioned in my first message.

Dne čtvrtek 26. dubna 2018 14:53:44 UTC+2 Leoš Junek napsal(a):

Duft Markus

unread,

Apr 26, 2018, 9:41:26 AM4/26/18

to Leoš Junek, Repo and Gerrit Discussion

When setting up a fresh Gerrit installation with 2.15 it seems that All-Projects contains this by default:

So I assume it’s required J

And: how does it makes any difference in bypassing review? Create reference only is about creating a non-existant ref in the repository (i.e. creating a branch) from the UI or remotely. If you don’t have the right to push to that ref though, create reference will only allow it in the web ui (untested assumption).

--
--
To unsubscribe, email repo-discuss...@googlegroups.com

More info at http://groups.google.com/group/repo-discuss?hl=en

---
You received this message because you are subscribed to the Google Groups "Repo and Gerrit Discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to repo-discuss...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Edwin Kempin

unread,

Apr 26, 2018, 9:53:35 AM4/26/18

to Markus Duft, leos...@gmail.com, Repo and Gerrit Discussion

If I remember this correctly then we always allowed project owners (OWNER access right) to create branches from the WebUI.

While by push creating branches always required CREATE REFERENCE even for project owners.

This was done like this so that project owners can easily create branches from the WebUI, while they are protected against creating branches accidentally by mistyping push commands.

i'm not aware that there was any change that changed this by intention, but there have been quite a lot of refactoring changes in the permission code and maybe that feature got lost somehow.

Reply all

Reply to author

Forward