infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

distgit/pagure: remove the commit ACL for API keys in prod

Browse source 
This ACL turns out to be too confusing to users as it currently
does not work with our OIDC set-up with fedpkg.
Once we'll have figured out how to make both work together or
keep one and remove the other, we can revisit.

Keeping this in staging so we have a place where we can experiment
with this.

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
This commit is contained in:
Pierre-Yves Chibon 2021-02-18 09:24:18 +01:00
parent db2ea51618
commit d0a8837c07
1 changed files with 6 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

6
roles/distgit/pagure/templates/pagure.cfg
View file

@ -233,7 +233,9 @@ ACLS = {
'commit_flag': 'Flag a commit',
"update_watch_status": "Update the watch status on a project",
"tag_project": "Allows adding git tags to a project",
{% if env == 'staging' %}
"commit": "Commit to a git repository via http(s)",
{% endif %}
}
REQUIRED_GROUPS = {
@ -264,7 +266,9 @@ USER_ACLS = [
'pull_request_merge',
'modify_project',
'update_watch_status',
{% if env == 'staging' %}
'commit',
{% endif %}
]
CROSS_PROJECT_ACLS = [
@ -275,7 +279,9 @@ CROSS_PROJECT_ACLS = [
'pull_request_merge',
'pull_request_flag',
'update_watch_status',
{% if env == 'staging' %}
'commit',
{% endif %}
]
ADMIN_API_ACLS = [