No Login needed, guests can do anything?!
Hi,
I've using gitlab on my own server. I followed the installation guide as well.
There is just one problem.
I've setting up a Repository for a project (It's a team of more then 5 members). The project is private, so the whole team can view the project. Also there is a protected branch, the production branch.
Soo, basicly:
- Only team members should be able to view the project (All members are developers), commit and push
- To the protected branch should only the two selected users be able to push
Via the web browser the permissions works very well. But:
- I am able to checkout the project without any login.
- I am able to commit and push to every branch
- I am able to commut and push to the protected branch.
Anything is possible without any login! I've test that on different devices, different OS. Also it doesen't metter if I commit / push via ssh or https.
Also it doesent't metter which project and which team I use - It's every time the same.
Any idea how this is possible? What could be the problem?
I have already updated to the latest version: GitLab 11.1.4 (63daf37a) The gitlab is installed on a CentOS 7 vm.
What I did:
gitlab-rake gitlab:check
And there I could see a error:
MyTeam / MyProject ... wrong or missing hooks
Try fixing it:
sudo -u git -H /opt/gitlab/embedded/service/gitlab-shell/bin/create-hooks /var/opt/gitlab/git-data/repositories
Check the hooks_path in config/gitlab.yml
Check your gitlab-shell installation
For more information see:
doc/install/installation.md in section "GitLab Shell"
Please fix the error above and rerun the checks.
So I tried to execute the command:
[16:12:34][root@git:~]$sudo -u git -H /opt/gitlab/embedded/service/gitlab-shell/bin/create-hooks /var/opt/gitlab/git-data/repositories
/opt/gitlab/embedded/service/gitlab-shell/bin/create-hooks:28:in `create_hooks': uninitialized constant FileUtils (NameError)
from /opt/gitlab/embedded/service/gitlab-shell/bin/create-hooks:43:in `block (3 levels) in <main>'
from /opt/gitlab/embedded/service/gitlab-shell/lib/gitlab_metrics.rb:50:in `measure'
from /opt/gitlab/embedded/service/gitlab-shell/bin/create-hooks:42:in `block (2 levels) in <main>'
from /opt/gitlab/embedded/service/gitlab-shell/bin/create-hooks:40:in `each'
from /opt/gitlab/embedded/service/gitlab-shell/bin/create-hooks:40:in `block in <main>'
from /opt/gitlab/embedded/service/gitlab-shell/bin/create-hooks:39:in `each'
from /opt/gitlab/embedded/service/gitlab-shell/bin/create-hooks:39:in `<main>'
Can this be the permission problem? How to solve?
I would be very happy to get a response. Thank you all!