Re: how to checkout All-Projects refs/meta/config

[Åsmund Østvold]

On Thu, Apr 9, 2015 at 12:31 PM, Edwin Kempin <edwin....@gmail.com> wrote:

2015-04-09 12:29 GMT+02:00 Åsmund Østvold <asm...@gmail.com>:

[access "refs/meta/config"]

        read = group Project Owners

        push = group Project Owners

To give administrators the push rights, shouldn't this be
   push = group Administrators
?

git push worked by adding:

[access "refs/meta/config"]

   push = group Administrators

I am now confused as it was possible to get read access with "Project Owners". I have probably misunderstood something in the ACL documentation. 

Again thank you Edwin

Asmund

[Edwin Kempin]

Read access worked by this rule:

  [access "refs/*"]

read = group Administrators

which was only considered after read on refs/meta/config was not exclusive anymore.

 

Again thank you Edwin

Asmund

--
--
To unsubscribe, email repo-discuss...@googlegroups.com
More info at http://groups.google.com/group/repo-discuss?hl=en

---
You received this message because you are subscribed to the Google Groups "Repo and Gerrit Discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to repo-discuss...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Åsmund Østvold]

thank you Edwin

Cased solved.

[Åsmund Østvold]

hi

I am running on 2.9 and I am trying to checkout All-Projects refs/meta/config. I am a member of group Administrators. Commands showing my issue:

> git clone ssh://aost...@cod.no.xxx.com:29418/All-Projects

[...]

> cd All-Projects

> git status

Not currently on any branch.

nothing to commit, working directory clean

From my local documentation I try:

>git fetch origin refs/meta/config:config

fatal: Couldn't find remote ref refs/meta/config

I have access to refs/meta/config for a project inheriting from All-projects but not for All-projects. When I clone the All-projects git I get the newst version of project.config. I expect I have done something wrong in my project.config:

[project]

description = Rights inherited by all other projects

[capability]

administrateServer = group Administrators

createGroup = group Administrators

flushCaches = group Administrators

streamEvents = group Non-Interactive Users

accessDatabase = group Administrators

[access "refs/*"]

read = group Administrators

read = group Non-Interactive Users

read = group Registered Users

viewDrafts = group Administrators

owner = group Administrators

[access "refs/for/refs/*"]

push = group Registered Users

create = group Registered Users

forgeCommitter = group Registered Users

[access "refs/meta/config"]

exclusiveGroupPermissions = read

read = group Project Owners

[access "refs/heads/master"]

push = group Project Owners

label-Code-Review = -2..+2 group Non-Interactive Users

label-Code-Review = -2..+2 group Registered Users

label-Verified = -1..+1 group Non-Interactive Users

label-Verified = -1..+1 group Registered Users

submit = group Non-Interactive Users

exclusiveGroupPermissions = push

[access "refs/heads/*"]

read = group Registered Users

create = group Registered Users

push = group Registered Users

owner = group Administrators

owner = group sif Owners

forgeCommitter = group Registered Users

forgeAuthor = group Registered Users

pushTag = group Registered Users

[access "refs/tags/*"]

pushTag = group Non-Interactive Users

pushTag = group Registered Users

create = group Non-Interactive Users

create = group Registered Users

push = +force group Registered Users

[label "Verified"]

function = MaxWithBlock

value = -1 Fails

value =  0 No score

value = +1 Verified

[label "Code-Review"]

function = MaxWithBlock

abbreviation = R

copyMinScore = true

value = -2 Do not submit

value = -1 I would prefer that you didn't submit this

value =  0 No score

value = +1 Looks good to me, but someone else must approve

value = +2 Looks good to me, approved

[receive]

requireContributorAgreement = false

requireSignedOffBy = false

requireChangeId = true

[submit]

action = cherry pick

mergeContent = true

Any help would be appreciated. 

Asmund

[Edwin Kempin]

I believe there is a bug in Gerrit that prevents you from fetching the
refs/meta/config branch via HTTP protocol if the read access right is
exclusive. Try to either remove the exclusive flag or to fetch via SSH.

 

--

[Åsmund Østvold]

Thank you Edwin,

Problem solved.

Asmund

[Åsmund Østvold]

almost there....

Now how do I push?

Note: 

   I am doing all my changes over the ssh interface. 

In the web interface I gave Administrators(I am still a member) push rights:

[access "refs/meta/config"]

        read = group Project Owners

        push = group Project Owners

I fetch and rebase my changes of project.config and try a push:

> git push origin HEAD:refs/meta/config

Counting objects: 3, done.

Delta compression using up to 4 threads.

Compressing objects: 100% (3/3), done.

Writing objects: 100% (3/3), 366 bytes | 0 bytes/s, done.

Total 3 (delta 1), reused 0 (delta 0)

remote: Resolving deltas: 100% (1/1)

remote: Branch refs/meta/config:

remote: You are not allowed to perform this operation.

remote: Configuration changes can only be pushed by project owners

remote: who also have 'Push' rights on refs/meta/config

remote: User: aostvold

remote: Please read the documentation and contact an administrator

remote: if you feel the configuration is incorrect

remote: Processing changes: refs: 1, done    

To ssh://aost...@cod.no.XXX.com:29418/All-Projects

 ! [remote rejected] HEAD -> refs/meta/config (prohibited by Gerrit)

error: failed to push some refs to 'ssh://aost...@cod.no.XXX.com:29418/All-Projects'

Missconfiguration or bug?

Any help is appreciated

Asmund 

[Edwin Kempin]

2015-04-09 12:29 GMT+02:00 Åsmund Østvold <asm...@gmail.com>:

almost there....

Now how do I push?

Note: 

   I am doing all my changes over the ssh interface. 

In the web interface I gave Administrators(I am still a member) push rights:

[access "refs/meta/config"]

        read = group Project Owners

        push = group Project Owners

To give administrators the push rights, shouldn't this be

   push = group Administrators
?

[lfree]

Thank you Edwin, too! :)