Author: otto
Description:
It'd be really helpful if admins for parent projects had permissions to run gerrit create-project. I'm and admin for the Analytics project, and I can create branches and set user permissions on any of our sub projects, but I cannot create new repositories. Would it be possible to make this happen?
Thanks!
Version: unspecified
Severity: enhancement
Removing keyword "upstream" as there isn't any bug report yet on the vendor site.
Relevant tracker: http://code.google.com/p/gerrit/issues/list
(In reply to comment #1)
Removing keyword "upstream" as there isn't any bug report yet on the vendor
site.
Then perhaps we should change the meaning of +upstream. I use it to mean "anything that has upstream issues that need resolving" -- requiring an actual filed bug is kind of silly IMHO.
(In reply to comment #0)
It'd be really helpful if admins for parent projects had permissions to run
gerrit create-project. I'm and admin for the Analytics project, and I can
create branches and set user permissions on any of our sub projects, but I
cannot create new repositories. Would it be possible to make this happen?
There's no way to delegate create-project rights to only specifically named repositories. Resolving LATER pending some rather big upstream changes that would be needed (and analytics has project creators now)
[Removing RESOLVED LATER as discussed in http://lists.wikimedia.org/pipermail/wikitech-l/2012-November/064240.html . Reopening and setting priority to "Lowest". For future reference, please use either RESOLVED WONTFIX (for issues that will not be fixed), or simply set lowest priority. Thanks a lot!]
Bumping this up to normal priority, and using this as a place to track the general desire to streamline project creation.
sumanah wrote:
(Thread with discussion: http://lists.wikimedia.org/pipermail/labs-l/2013-June/001339.html )
We're looking at ways to handle this via a MediaWiki extension on wikitech. Chad and I are looking to do a sprint on it at some point.
Coren and I have a plan to give service groups gerrit rights by making service groups globally unique, then changing gerrit's search scope for groups. This would make it possible for service group members to manage their repos.
The Create Project permission is a global one. Either one is allowed to create any project or none. Any person in the Gerrit Managers group has the right, else one has to file a request at https://www.mediawiki.org/wiki/Gerrit/New_repositories
Has anyone ever looked at the project-group-structure plugin, which allows for access scoped project creation?
Nice finding, it looks like the plugin would fulfill the requirement. It is probably worth pursuing, the requests are currently handled by @QChris https://www.mediawiki.org/wiki/Gerrit/New_repositories/Requests and the permission is granted to Gerrit Managers (and Administrators).
Nice!
But in addition to plain project creation in our Gerrit, we also do the following tasks that are not covered by the plugin:
We can try to implement these tasks to the plugin/Gerrit (or scrap the tasks), sure.
But given that we're sunsetting Gerrit (and unless we're challenging that decision), I'm not sure it's worth investing more time into making Gerrit more usable.
Especially in an area that is seldomly used -- we've up to now seen only 3 requests for new Gerrit repos this whole February :-)