|
pygitweb: permissions model
* pydantic model normally stored in ~/.pygitweb/auth.json
* key/value permissions mapping permissions onto list of allowed users
* if project-scoped, the last part of the permission key accepts a project name - last to avoid project name/permission name conflicts
* permission username pool is shared between oauth principal emails and local users; this is not a concern if the provider correctly exposes *only* emails but we may want to provide additional security guarantees here. |