Cannot set default git ACLs for a team

Bug #1993303 reported by Robie Basak
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Launchpad itself
New
Undecided
Unassigned

Bug Description

This is a feature request.

git-ubuntu is maintaining a very large number of repositories, and it's looking like we're going to need to start using ACLs in some fashion to maintain a staging area (see also bug 1993290).

I'd like to be able to specify a "default" git ACL at team level, which would apply if no specific ACLs are set against a specific repository. This way, I wouldn't have to have the git-ubuntu importer maintain a separate ACL for every repository that is essentially the same. Further, if we implement staging branches using something like the ~ubuntu-uploaders team namespace, then repositories won't necessarily exist until there is something staged; having a default would allow the ACLs to be immediately correct without having to require the ACL to be individually set at the time the staging takes place, making the workflow easier for uploaders.

I imagine the default would need to be on a per-target-distribution basis, so something like "repositories owned by team X that have a target in the Y distribution should act as if they have ACL entries Z1 and Z2 except where they have per-repository ACLs set explicitly"

Related branches

Robie Basak (racb)
description: updated
Guruprasad (lgp171188)
tags: added: feature git lp-code
Revision history for this message
Robie Basak (racb) wrote :

FYI, I think there was some discussion about the possibility of a default ACL on per-distribution rather than a per-team basis. This should also work for git-ubuntu. The kernel team also have a few repositories left that are defaults for some kernel source package targets. A default ACL that suits git-ubuntu might collide with those, but I don't think the kernel team needs those to be default for their targets any more. We should double check with them.

(though I do wonder how it would work if a non-repository-owner can set it as a default for a target therefore control that repository's ACL!)

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.