Page MenuHomePhabricator

Only require view permissions for read-only Git LFS requests
ClosedPublic

Authored by epriestley on Mar 19 2016, 6:11 PM.
Tags
None
Referenced Files
F18866400: D15499.id37361.diff
Mon, Nov 3, 4:56 PM
F18829648: D15499.id.diff
Oct 24 2025, 11:32 PM
F18825818: D15499.diff
Oct 24 2025, 12:27 AM
F18808252: D15499.id37360.diff
Oct 19 2025, 5:48 AM
F18740303: D15499.diff
Oct 2 2025, 2:00 AM
F18103069: D15499.id.diff
Aug 10 2025, 1:29 AM
F18100054: D15499.id37360.diff
Aug 9 2025, 10:36 AM
F18097849: D15499.id37361.diff
Aug 8 2025, 3:52 PM
Subscribers
None

Details

Summary

Ref T7789. Implement proper detection for read-only requests. Previously, we assumed every request was read/write and required lots of permissions, but we don't need "Can Push" permission if you're only cloning/fetching/pulling.

Test Plan
  • Set push policy to "no one".
  • Fetched, got clean data out of LFS.
  • Tried to push, got useful error.

Diff Detail

Repository
rP Phabricator
Branch
lfs15
Lint
Lint Passed
Unit
Tests Passed
Build Status
Buildable 11224
Build 13934: Run Core Tests
Build 13933: arc lint + arc unit

Event Timeline

epriestley retitled this revision from to Only require view permissions for read-only Git LFS requests.
epriestley updated this object.
epriestley edited the test plan for this revision. (Show Details)
epriestley added a reviewer: chad.
epriestley edited edge metadata.
  • Also do set_time_limit(0).
chad edited edge metadata.
This revision is now accepted and ready to land.Mar 19 2016, 9:22 PM
This revision was automatically updated to reflect the committed changes.