Question

I've been using gitolite/gitweb for the past few months and have been very satisfied with the combo, but am now looking at moving towards a better-managed web front-end where I can restrict access to what visitors see. We are expanding the use of GIT beyond its current scope and want to be able to browse code that has non-public information in it. Currently, this code is NOT listed on gitweb due to its sensitivity.

I've looked at solutions such as Redmine and Indefero, but they seem to require a brand-new git repository to be generated instead of using an existing one.

Any feedback on how to proceed would be greatly appreciated.

FOLLOW-UP

I did find this link during my search this afternoon. Does anyone have experience with this method?

Was it helpful?

Solution

gitolite is perfectly able to restrict what a user will see based on its username.
All you need to do is to plug gitolite to the gitweb.

Only the repos for which the user has at least 'R' read access will be visible through gitweb, or cloned through gitolite.

Since said repositories are stored in a special gitolite account with a homedir protected as 700, there is no issue of data leakage for any of our sensitive repos.

Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow
scroll top