Skip to content
Snippets Groups Projects
Select Git revision
  • move-gl-dropdown
  • improve-table-pagination-spec
  • move-markdown-preview
  • winh-fix-merge-request-spec
  • master default
  • index-namespaces-lower-name
  • winh-single-karma-test
  • 10-3-stable
  • 36782-replace-team-user-role-with-add_role-user-in-specs
  • winh-modal-internal-state
  • tz-ide-file-icons
  • 38869-milestone-select
  • update-autodevops-template
  • jivl-activate-repo-cookie-preferences
  • qa-add-deploy-key
  • docs-move-article-ldap
  • 40780-choose-file
  • 22643-manual-job-page
  • refactor-cluster-show-page-conservative
  • dm-sidekiq-versioning
  • v10.4.0.pre
  • v10.3.0
  • v10.3.0-rc5
  • v10.3.0-rc4
  • v10.3.0-rc3
  • v10.3.0-rc2
  • v10.2.5
  • v10.3.0-rc1
  • v10.0.7
  • v10.1.5
  • v10.2.4
  • v10.2.3
  • v10.2.2
  • v10.2.1
  • v10.3.0.pre
  • v10.2.0
  • v10.2.0-rc4
  • v10.2.0-rc3
  • v10.1.4
  • v10.2.0-rc2
40 results

git_access.rb

Forked from GitLab.org / GitLab FOSS
18912 commits behind the upstream repository.
  • Jacob Vosmaer (GitLab)'s avatar
    b8f754dd
    Stop 'git push' over HTTP early · b8f754dd
    Jacob Vosmaer (GitLab) authored
    Before this change we always let users push Git data over HTTP before
    deciding whether to accept to push. This was different from pushing
    over SSH where we terminate a 'git push' early if we already know the
    user is not allowed to push.
    
    This change let Git over HTTP follow the same behavior as Git over
    SSH. We also distinguish between HTTP 404 and 403 responses when
    denying Git requests, depending on whether the user is allowed to know
    the project exists.
    b8f754dd
    History
    Stop 'git push' over HTTP early
    Jacob Vosmaer (GitLab) authored
    Before this change we always let users push Git data over HTTP before
    deciding whether to accept to push. This was different from pushing
    over SSH where we terminate a 'git push' early if we already know the
    user is not allowed to push.
    
    This change let Git over HTTP follow the same behavior as Git over
    SSH. We also distinguish between HTTP 404 and 403 responses when
    denying Git requests, depending on whether the user is allowed to know
    the project exists.
git_access.rb 3.63 KiB