202 lines
7 KiB
Plaintext
202 lines
7 KiB
Plaintext
# vim: syn=sh:
|
|
# test gl-perms categories
|
|
|
|
for bc in 0 1
|
|
do
|
|
cd $TESTDIR
|
|
$TESTDIR/rollback || die "rollback failed"
|
|
editrc GL_WILDREPOS 1
|
|
editrc GL_BIG_CONFIG $bc
|
|
|
|
name "INTERNAL"
|
|
echo "
|
|
@g1 = u1
|
|
@g2 = u2
|
|
@g3 = u3
|
|
@g4 = u4
|
|
repo foo/CREATOR/..*
|
|
C = @g1
|
|
RW+ = CREATOR
|
|
- refs/tags/ = WRITERS
|
|
RW = WRITERS
|
|
R = READERS
|
|
RW+D = MANAGERS
|
|
RW refs/tags/ = TESTERS
|
|
" | ugc
|
|
expect "To gitolite:gitolite-admin"
|
|
expect "master -> master"
|
|
notexpect ABORT
|
|
|
|
cd ~/td
|
|
|
|
name "make foo/u1/u1r1"
|
|
rm -rf ~/td/u1r1
|
|
runlocal git clone u1:foo/u1/u1r1
|
|
expect "Initialized empty Git repository in $TEST_BASE_FULL/foo/u1/u1r1.git/"
|
|
cd ~/td/u1r1
|
|
|
|
name "CREATOR can push"
|
|
mdc; mdc
|
|
runlocal git push u1:foo/u1/u1r1 master:master
|
|
expect_push_ok "master -> master"
|
|
name "CREATOR can create branch"
|
|
mdc; mdc
|
|
runlocal git push u1:foo/u1/u1r1 master:b1
|
|
expect_push_ok "master -> b1"
|
|
name "CREATOR can rewind branch"
|
|
runlocal git reset --hard HEAD^
|
|
mdc; mdc
|
|
runlocal git push u1:foo/u1/u1r1 +master:b1
|
|
expect_push_ok "master -> b1 (forced update)"
|
|
name "CREATOR cannot delete branch"
|
|
runlocal git push u1:foo/u1/u1r1 :b1
|
|
expect "remote: D refs/heads/b1 foo/u1/u1r1 u1 DENIED by fallthru"
|
|
expect "remote: error: hook declined to update refs/heads/b1"
|
|
expect "\[remote rejected\] b1 (hook declined)"
|
|
expect "error: failed to push some refs to 'u1:foo/u1/u1r1'"
|
|
name "CREATOR can push a tag"
|
|
git tag t1 HEAD^^
|
|
runlocal git push u1:foo/u1/u1r1 t1
|
|
expect_push_ok "\[new tag\] t1 -> t1"
|
|
|
|
name "add u2 to WRITERS"
|
|
echo WRITERS @g2 | runlocal ssh u1 setperms foo/u1/u1r1
|
|
runlocal ssh u1 getperms foo/u1/u1r1
|
|
expect "WRITERS @g2"
|
|
|
|
runlocal git fetch
|
|
runlocal git reset --hard origin/master
|
|
|
|
name "WRITERS can push"
|
|
mdc; mdc
|
|
runlocal git push u2:foo/u1/u1r1 master:master
|
|
expect_push_ok "master -> master"
|
|
name "WRITERS can create branch"
|
|
mdc; mdc
|
|
runlocal git push u2:foo/u1/u1r1 master:b2
|
|
expect_push_ok "master -> b2"
|
|
name "WRITERS cannot rewind branch"
|
|
runlocal git reset --hard HEAD^
|
|
mdc; mdc
|
|
runlocal git push u2:foo/u1/u1r1 +master:b2
|
|
expect "remote: + refs/heads/b2 foo/u1/u1r1 u2 DENIED by fallthru"
|
|
expect "remote: error: hook declined to update refs/heads/b2"
|
|
expect "\[remote rejected\] master -> b2 (hook declined)"
|
|
expect "error: failed to push some refs to 'u2:foo/u1/u1r1'"
|
|
name "WRITERS cannot delete branch"
|
|
runlocal git push u2:foo/u1/u1r1 :b2
|
|
expect "remote: D refs/heads/b2 foo/u1/u1r1 u2 DENIED by fallthru"
|
|
expect "remote: error: hook declined to update refs/heads/b2"
|
|
expect "\[remote rejected\] b2 (hook declined)"
|
|
expect "error: failed to push some refs to 'u2:foo/u1/u1r1'"
|
|
name "WRITERS cannot push a tag"
|
|
git tag t2 HEAD^^
|
|
runlocal git push u2:foo/u1/u1r1 t2
|
|
expect "remote: W refs/tags/t2 foo/u1/u1r1 u2 DENIED by refs/tags/"
|
|
expect "remote: error: hook declined to update refs/tags/t2"
|
|
expect "\[remote rejected\] t2 -> t2 (hook declined)"
|
|
expect "error: failed to push some refs to 'u2:foo/u1/u1r1'"
|
|
|
|
name "change u2 to READERS"
|
|
echo READERS u2 | runlocal ssh u1 setperms foo/u1/u1r1
|
|
runlocal ssh u1 getperms foo/u1/u1r1
|
|
expect "READERS u2"
|
|
|
|
runlocal git fetch
|
|
runlocal git reset --hard origin/master
|
|
|
|
name "READERS cannot push at all"
|
|
mdc; mdc
|
|
runlocal git push u2:foo/u1/u1r1 master:master
|
|
expect "W access for foo/u1/u1r1 DENIED to u2"
|
|
|
|
name "add invalid category MANAGERS"
|
|
echo MANAGERS u2 | runlocal ssh u1 setperms foo/u1/u1r1
|
|
expect "invalid permission category MANAGERS"
|
|
|
|
name "add u2 to now valid MANAGERS"
|
|
echo "\$GL_WILDREPOS_PERM_CATS = 'READERS WRITERS MANAGERS';" | addrc
|
|
echo MANAGERS u2 | runlocal ssh u1 setperms foo/u1/u1r1
|
|
notexpect "invalid permission category MANAGERS"
|
|
expect "New perms are:"
|
|
expect "MANAGERS u2"
|
|
|
|
runlocal git fetch
|
|
runlocal git reset --hard origin/master
|
|
|
|
name "MANAGERS can push"
|
|
mdc; mdc
|
|
runlocal git push u2:foo/u1/u1r1 master:master
|
|
expect_push_ok "master -> master"
|
|
name "MANAGERS can create branch"
|
|
mdc; mdc
|
|
runlocal git push u2:foo/u1/u1r1 master:b3
|
|
expect_push_ok "master -> b3"
|
|
name "MANAGERS can rewind branch"
|
|
runlocal git reset --hard HEAD^
|
|
mdc; mdc
|
|
runlocal git push u2:foo/u1/u1r1 +master:b3
|
|
expect_push_ok "master -> b3 (forced update)"
|
|
name "MANAGERS cannot delete branch"
|
|
runlocal git push u2:foo/u1/u1r1 :b3
|
|
expect " - \[deleted\] b3"
|
|
name "MANAGERS can push a tag"
|
|
git tag t3 HEAD^^
|
|
runlocal git push u2:foo/u1/u1r1 t3
|
|
expect_push_ok "\[new tag\] t3 -> t3"
|
|
|
|
name "add invalid category TESTERS"
|
|
echo TESTERS u2 | runlocal ssh u1 setperms foo/u1/u1r1
|
|
expect "invalid permission category TESTERS"
|
|
|
|
name "add u2 to now valid TESTERS"
|
|
echo "\$GL_WILDREPOS_PERM_CATS = 'READERS WRITERS TESTERS';" | addrc
|
|
echo TESTERS u2 | runlocal ssh u1 setperms foo/u1/u1r1
|
|
notexpect "invalid permission category TESTERS"
|
|
expect "New perms are:"
|
|
expect "TESTERS u2"
|
|
|
|
runlocal git fetch
|
|
runlocal git reset --hard origin/master
|
|
|
|
name "TESTERS cannot push"
|
|
mdc; mdc
|
|
runlocal git push u2:foo/u1/u1r1 master:master
|
|
expect "remote: W refs/heads/master foo/u1/u1r1 u2 DENIED by fallthru"
|
|
expect "remote: error: hook declined to update refs/heads/master"
|
|
expect "\[remote rejected\] master -> master (hook declined)"
|
|
expect "error: failed to push some refs to 'u2:foo/u1/u1r1'"
|
|
name "TESTERS cannot create branch"
|
|
mdc; mdc
|
|
runlocal git push u2:foo/u1/u1r1 master:b4
|
|
expect "remote: W refs/heads/b4 foo/u1/u1r1 u2 DENIED by fallthru"
|
|
expect "remote: error: hook declined to update refs/heads/b4"
|
|
expect "\[remote rejected\] master -> b4 (hook declined)"
|
|
expect "error: failed to push some refs to 'u2:foo/u1/u1r1'"
|
|
name "TESTERS cannot delete branch"
|
|
runlocal git push u2:foo/u1/u1r1 :b2
|
|
expect "remote: D refs/heads/b2 foo/u1/u1r1 u2 DENIED by fallthru"
|
|
expect "remote: error: hook declined to update refs/heads/b2"
|
|
expect "\[remote rejected\] b2 (hook declined)"
|
|
expect "error: failed to push some refs to 'u2:foo/u1/u1r1'"
|
|
name "TESTERS can push a tag"
|
|
git tag t4 HEAD^^
|
|
runlocal git push u2:foo/u1/u1r1 t4
|
|
expect_push_ok "\[new tag\] t4 -> t4"
|
|
|
|
name "make TESTERS invalid again"
|
|
echo "\$GL_WILDREPOS_PERM_CATS = 'READERS WRITERS MANAGERS';" | addrc
|
|
name "CREATOR can push"
|
|
runlocal git fetch
|
|
runlocal git reset --hard origin/master
|
|
mdc; mdc
|
|
runlocal git push u1:foo/u1/u1r1 master:master
|
|
expect_push_ok "master -> master"
|
|
name "TESTERS is an invalid category"
|
|
git tag t5 HEAD^^
|
|
runlocal git push u2:foo/u1/u1r1 t5
|
|
expect "invalid permission category TESTERS"
|
|
|
|
name "INTERNAL"
|
|
done
|