Students who know gerrit know that gerrit is a commonly used tool for code review. Permission management is a very important link. For the scope of use of each permission, you can refer to the blog https:// blog.csdn.net/chenjh213/article/details/50571190, it is a very detailed introduction. Regarding the groups, we have such a scenario: the code warehouse is a very important code warehouse, which is only used by designated personnel, and others. It cannot be downloaded and viewed. At this time, the relationship between group members and default permissions is involved. Gerrit's idea is: when the default permissions conflict with the group permissions, the group permissions are the main ones, that is, the group permissions will override the default permissions.
We now have two groups: group1 contains developers of the whole company, such as user1, user2, user3, user4, group2 contains developers responsible for feature_repo, such as user1, user2, of course, user1 and user2 of group2 are user1 in group1 , user2.
It is necessary to set the feature_repo project to be downloaded only to the members of group2. User3 and user4 in group1 cannot be downloaded. After creating group2 and adding user1 and user2, you need to create an empty warehouse, group2, and set the permissions as follows:
push: set to prohibit non-group people from pushing code
Read: Setting Up Non-Group Clone Codes