Page MenuHomePhabricator

Only require view permissions for read-only Git LFS requests
ClosedPublic

Authored by epriestley on Mar 19 2016, 6:11 PM.
Tags
None
Referenced Files
F18740303: D15499.diff
Thu, Oct 2, 2:00 AM
F18103069: D15499.id.diff
Aug 10 2025, 1:29 AM
F18100054: D15499.id37360.diff
Aug 9 2025, 10:36 AM
F18097849: D15499.id37361.diff
Aug 8 2025, 3:52 PM
F18093751: D15499.diff
Aug 7 2025, 8:23 PM
F17921769: D15499.diff
Jul 30 2025, 5:49 AM
F17630241: D15499.id37362.diff
Jul 10 2025, 10:32 AM
F17622888: D15499.id.diff
Jul 10 2025, 12:02 AM
Subscribers
None

Details

Summary

Ref T7789. Implement proper detection for read-only requests. Previously, we assumed every request was read/write and required lots of permissions, but we don't need "Can Push" permission if you're only cloning/fetching/pulling.

Test Plan
  • Set push policy to "no one".
  • Fetched, got clean data out of LFS.
  • Tried to push, got useful error.

Diff Detail

Repository
rP Phabricator
Branch
lfs15
Lint
Lint Passed
Unit
Tests Passed
Build Status
Buildable 11223
Build 13932: Run Core Tests
Build 13931: arc lint + arc unit

Event Timeline

epriestley retitled this revision from to Only require view permissions for read-only Git LFS requests.
epriestley updated this object.
epriestley edited the test plan for this revision. (Show Details)
epriestley added a reviewer: chad.
epriestley edited edge metadata.
  • Also do set_time_limit(0).
chad edited edge metadata.
This revision is now accepted and ready to land.Mar 19 2016, 9:22 PM
This revision was automatically updated to reflect the committed changes.