Skip to content

Stop 'git push' over HTTP early

Jacob Vosmaer requested to merge jacobvosmaer-gitlab/gitlab-ce:git-http-push-check into master

Before this change we always let users push Git data over HTTP before deciding whether to accept to push. This was different from pushing over SSH where we terminate a 'git push' early if we already know the user is not allowed to push.

This change let Git over HTTP follow the same behavior as Git over SSH. We also distinguish between HTTP 404 and 403 responses when denying Git requests, depending on whether the user is allowed to know the project exists.

Merge request reports