Hello everyone,
I have the following setup:

* a group called RTT in GitLab
* All group members in RTT have Owner permissions. This is important, they 
need to be able to create repositories in the group.
* Then I've created a new project under RTT/test-me. While creating it, 
selected "Project access must be granted explicitly to each user."
* master branch is protected
* Group members are not explicitly listed as project members.

Results:
Group members are able to push to master branch in the private project. 

I wish to know is this a known limitation of GitLab permissions model or a 
bug ? I have the impression this is a bug b/c I have the expectation that 
access to private projects must be allowed explicitly.


Anyone seen this issue ? 

Thanks,
Alex

-- 
You received this message because you are subscribed to the Google Groups 
"GitLab" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to gitlabhq+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/gitlabhq/4c80fbea-9fca-4959-b98b-eb8d6f66050a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to