undef/git-commit-vandalism
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

hook/update: example of how to prevent branch creation

Browse Source 
Since git doesn't provide a receive.denyBranchCreation or similar, here is
an example of how to be sure users cannot create branches remotely by
pushing a new reference.

This setup has been proven useful to prevent creation of spurious branches
because of users having their remote.origin.push set to HEAD, when they
use `git push` while being on a local topic branch of theirs instead of
the proper one.

Signed-off-by: Pierre Habouzit <madcoder@debian.org>
Signed-off-by: Junio C Hamano <gitster@pobox.com>
This commit is contained in:
Pierre Habouzit 2009-04-16 22:00:44 +02:00 committed by Junio C Hamano
parent 55f0566f6d
commit aed97c677c
1 changed files with 10 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
templates/hooks--update.sample
View File

@ -16,6 +16,9 @@
# hooks.allowdeletebranch # hooks.allowdeletebranch
# This boolean sets whether deleting branches will be allowed in the # This boolean sets whether deleting branches will be allowed in the
# repository. By default they won't be. # repository. By default they won't be.
# hooks.denycreatebranch
# This boolean sets whether remotely creating branches will be denied
# in the repository. By default this is allowed.
# #
# --- Command line # --- Command line
@ -39,6 +42,7 @@ fi
# --- Config # --- Config
allowunannotated=$(git config --bool hooks.allowunannotated) allowunannotated=$(git config --bool hooks.allowunannotated)
allowdeletebranch=$(git config --bool hooks.allowdeletebranch) allowdeletebranch=$(git config --bool hooks.allowdeletebranch)
denycreatebranch=$(git config --bool hooks.denycreatebranch)
allowdeletetag=$(git config --bool hooks.allowdeletetag) allowdeletetag=$(git config --bool hooks.allowdeletetag)
# check for no description # check for no description
@ -52,7 +56,8 @@ esac
# --- Check types # --- Check types
# if $newrev is 0000...0000, it's a commit to delete a ref. # if $newrev is 0000...0000, it's a commit to delete a ref.
if [ "$newrev" = "0000000000000000000000000000000000000000" ]; then zero="0000000000000000000000000000000000000000"
if [ "$newrev" = "$zero" ]; then
newrev_type=delete newrev_type=delete
else else
newrev_type=$(git-cat-file -t $newrev) newrev_type=$(git-cat-file -t $newrev)
@ -80,6 +85,10 @@ case "$refname","$newrev_type" in
;; ;;
refs/heads/*,commit) refs/heads/*,commit)
# branch # branch
if [ "$oldrev" = "$zero" -a "$denycreatebranch" = "true" ]; then
echo "*** Creating a branch is not allowed in this repository" >&2
exit 1
fi
;; ;;
refs/heads/*,delete) refs/heads/*,delete)
# delete branch # delete branch