36 lines
1.3 KiB
Markdown
36 lines
1.3 KiB
Markdown
|
## #g2incompat compatibility with g2
|
||
|
|
|
||
|
|
The following incompatibilities exist, in vaguely decreasing order of
|
||
|
|
severity. **The ones in the first section are IMPORTANT because they allow
|
||
|
|
access that was previously not allowed -- please fix your config before using
|
||
|
|
the new gitolite!**
|
||
|
|
|
||
|
|
### fallthru in NAME rules
|
||
|
|
|
||
|
|
Fallthru on all VREFs is "success" now, so any NAME/ rules you have **MUST**
|
||
|
|
change the ruleset in some way. The simplest is to add the following line to
|
||
|
|
the end of each repo's rule list:
|
||
|
|
|
||
|
|
- NAME/ = @all
|
||
|
|
|
||
|
|
### subconf command in admin repo
|
||
|
|
|
||
|
|
(This is also affected by the previous issue, 'fallthru in NAME rules'; please
|
||
|
|
read that as well).
|
||
|
|
|
||
|
|
If you're using delegation in your admin conf setup, please add the following
|
||
|
|
lines to the end of the gitolite-admin rules in your conf/gitolite.conf file:
|
||
|
|
|
||
|
|
repo gitolite-admin
|
||
|
|
- NAME/ = @all
|
||
|
|
|
||
|
|
subconf "fragments/*.conf"
|
||
|
|
|
||
|
|
The first part compensates for fallthru now being a success when processing
|
||
|
|
[VREF][vref] rules (NAME rules are just one specific VREF). Although,
|
||
|
|
**ideally**, you should change your ruleset so that you no longer require that
|
||
|
|
line. As the [vref documentation][vref] says:
|
||
|
|
|
||
|
|
> **Virtual refs are best used as additional "deny" rules**, performing
|
||
|
|
> extra checks that core gitolite cannot.
|