Search code examples
gitlabgitlab-omnibus

Gitlab ci omnibus access rights

i have gitlab omnibus, 8.0.4 version, installed on private server, we need to remove access right from reporter to read/pull/download code,

so we dont want reporter to viewer the source code

I think it can be done through editing some file on the server, right?

how can we do it?

Solution

  • Reporter always has read access to files, issues and merge requests. This cannot be altered (and we do not recommend modifying source files since it makes upgrades more difficult).

    My suggestion is to create a separate project with only the issue tracker enabled and add the user as a reporter there. Keep the project with source code private.

    Danger section ;)

    If you really want to modify the code, look in app/models/ability.rb. In the project_report_rules method remove the rights you do not wish 'reporter' to have.