2012-03-25 05:45:39 +02:00
|
|
|
## #g2incompat incompatibility with g2
|
|
|
|
|
|
|
|
(other than in the rc file, which is dealt with [elsewhere][g2rcdiff])
|
2012-03-16 02:54:47 +01:00
|
|
|
|
|
|
|
The following incompatibilities exist, in vaguely decreasing order of
|
|
|
|
severity. **The ones in the first section are IMPORTANT because they allow
|
|
|
|
access that was previously not allowed -- please fix your config before using
|
|
|
|
the new gitolite!**
|
|
|
|
|
2012-04-05 18:01:23 +02:00
|
|
|
### NAME rules
|
2012-03-16 02:54:47 +01:00
|
|
|
|
2012-04-05 18:01:23 +02:00
|
|
|
1. NAME/ rules must be changed to VREF/NAME/
|
2012-03-16 02:54:47 +01:00
|
|
|
|
2012-04-05 18:01:23 +02:00
|
|
|
2. Fallthru on all VREFs is "success" now, so any NAME/ rules you have
|
|
|
|
**MUST** change the ruleset in some way to maintain the same restrictions.
|
|
|
|
The simplest is to add the following line to the end of each repo's rule
|
|
|
|
list:
|
|
|
|
|
|
|
|
- VREF/NAME/ = @all
|
2012-03-16 02:54:47 +01:00
|
|
|
|
|
|
|
### subconf command in admin repo
|
|
|
|
|
2012-04-05 18:01:23 +02:00
|
|
|
(This is also affected by the previous issue, 'NAME rules'; please read that
|
|
|
|
as well).
|
2012-03-16 02:54:47 +01:00
|
|
|
|
|
|
|
If you're using delegation in your admin conf setup, please add the following
|
|
|
|
lines to the end of the gitolite-admin rules in your conf/gitolite.conf file:
|
|
|
|
|
|
|
|
repo gitolite-admin
|
2012-04-05 18:01:23 +02:00
|
|
|
- VREF/NAME/ = @all
|
2012-03-16 02:54:47 +01:00
|
|
|
|
|
|
|
subconf "fragments/*.conf"
|
|
|
|
|
|
|
|
The first part compensates for fallthru now being a success when processing
|
|
|
|
[VREF][vref] rules (NAME rules are just one specific VREF). Although,
|
|
|
|
**ideally**, you should change your ruleset so that you no longer require that
|
|
|
|
line. As the [vref documentation][vref] says:
|
|
|
|
|
|
|
|
> **Virtual refs are best used as additional "deny" rules**, performing
|
|
|
|
> extra checks that core gitolite cannot.
|
2012-03-25 05:45:39 +02:00
|
|
|
|
|
|
|
The second part explicitly says when and where to include the subconf files.
|
|
|
|
(Before subconf was invented, this used to happen implicitly at the end of the
|
|
|
|
main conf file, and was hardcoded to that specific glob.)
|