Does the Gitolite @all group include the gitolite-admin repo?

Question

In my googling, I've only came across statements that state that @all "includes all users and repos"

I'd like to use @all to provide daemon access, that is

repo @all
   R = daemon

But I'm concerned that would provide read access to the gitolite-admin repo.

score 1 · Accepted Answer · answered Nov 04 '16 at 17:21

Yes, it will allow access to all repos.

However, you can prevent this, as documented:

@secret = gitolite-admin secret-repo/..*
repo @secret
    -   =   daemon
    option deny-rules = 1

repo @all
    R   =   daemon

Note that the order matters in this case.

1 Answers1