The RefControl class introduces per-branch access control rules.
ProjectRight is replaced by RefRight in the database, shifting all
current access records to include a reference pattern that matches
the previously assumed target namespace. For example, PUSH_HEAD
is now matched against refs/heads/*, as is SUBMIT.
Although this implementation starts the foundation for per-branch
level READ access, it is not fully supported. The Git native
protocol exposes all branches to readers, which means users can
still fetch the Git objects even if the web UI wouldn't allow them
to see the change.
This work was a joint effort between Nico and Shawn. Nico started
the change and did the bulk of the implementation. Shawn did a
bunch of cleanup work near the tail end. Consequently all bugs
are Shawn's fault.
Bug: issue 60
Change-Id: I62401d80cbb885180614a4f20a945f5611de8986
Signed-off-by: Shawn O. Pearce <sop@google.com>
75afdfdc84