summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorLars Wirzenius <liw@liw.fi>2017-03-05 15:59:42 +0200
committerLars Wirzenius <liw@liw.fi>2017-03-05 15:59:42 +0200
commitde2ef19c40eafadd0d169cf1aae40525e958095f (patch)
tree957f6efc5ae6f4eb8a846c7f7aa890f7ffdcbad8
parentbf63b9a3e4fb66a893bee5c11aeb0f022a68e9f8 (diff)
downloadgit.liw.fi-ruleset-tests-de2ef19c40eafadd0d169cf1aae40525e958095f.tar.gz
Add ruleset delta
-rw-r--r--000.yarn23
1 files changed, 23 insertions, 0 deletions
diff --git a/000.yarn b/000.yarn
index f85561b..9deb11e 100644
--- a/000.yarn
+++ b/000.yarn
@@ -72,6 +72,29 @@ Rough outline for ruleset
published via the anonymous git prototocol.
+The ruleset change to standard Gitano ruleset
+=============================================================================
+
+The following lines added to `rules/project.lace` in the
+`gitano-admin.git` repository implement the ruleset change, on top of
+the standard Gitano ruleset.
+
+ define repo_is_public config/public exact yes
+ allow "Everyone can read a public repo" op_read repo_is_public
+
+ define user_is_repo_reader group exact ${config/readers}
+ allow "Readers may read" op_read user_is_repo_reader
+
+ define user_is_repo_writer group exact ${config/writers}
+ allow "Writers may read and write" op_is_basic user_is_repo_writer
+ allow "Writers may update any branch" op_is_normal user_is_repo_writer
+
+ define user_is_repo_guest group exact ${config/guests}
+ define ref_is_for_user ref prefix ${user}/
+ allow "Guests may read and write" op_is_basic user_is_repo_guest
+ allow "Guests may update their own refs" op_is_normal user_is_repo_guest
+
+
Use cases as automated test scenarios
=============================================================================