2014-05-27 08:12:15 -04:00
|
|
|
# Permissions
|
|
|
|
|
|
2014-02-13 05:55:46 -05:00
|
|
|
Users have different abilities depending on the access level they have in a particular group or project.
|
2014-04-24 18:48:22 -04:00
|
|
|
|
2014-02-13 05:55:46 -05:00
|
|
|
If a user is both in a project group and in the project itself, the highest permission level is used.
|
2014-04-24 18:48:22 -04:00
|
|
|
|
2014-02-13 05:55:46 -05:00
|
|
|
If a user is a GitLab administrator they receive all permissions.
|
|
|
|
|
|
2016-02-22 13:44:13 -05:00
|
|
|
On public and internal projects the Guest role is not enforced.
|
2015-12-28 16:06:40 -05:00
|
|
|
All users will be able to create issues, leave comments, and pull or download the project code.
|
2015-12-02 09:21:02 -05:00
|
|
|
|
2015-08-03 18:51:09 -04:00
|
|
|
To add or import a user, you can follow the [project users and members
|
2015-12-28 16:06:40 -05:00
|
|
|
documentation](../workflow/add-user/add-user.md).
|
2015-07-30 16:20:10 -04:00
|
|
|
|
2014-04-24 18:48:22 -04:00
|
|
|
## Project
|
|
|
|
|
|
|
|
|
|
| Action | Guest | Reporter | Developer | Master | Owner |
|
|
|
|
|
|---------------------------------------|---------|------------|-------------|----------|--------|
|
|
|
|
|
| Create new issue | ✓ | ✓ | ✓ | ✓ | ✓ |
|
|
|
|
|
| Leave comments | ✓ | ✓ | ✓ | ✓ | ✓ |
|
2016-02-02 11:59:37 -05:00
|
|
|
| See a list of builds | ✓ [^1] | ✓ | ✓ | ✓ | ✓ |
|
|
|
|
|
| See a build log | ✓ [^1] | ✓ | ✓ | ✓ | ✓ |
|
|
|
|
|
| Download and browse build artifacts | ✓ [^1] | ✓ | ✓ | ✓ | ✓ |
|
2015-12-02 09:21:02 -05:00
|
|
|
| Pull project code | | ✓ | ✓ | ✓ | ✓ |
|
|
|
|
|
| Download project | | ✓ | ✓ | ✓ | ✓ |
|
2014-04-24 18:48:22 -04:00
|
|
|
| Create code snippets | | ✓ | ✓ | ✓ | ✓ |
|
2015-06-30 07:33:02 -04:00
|
|
|
| Manage issue tracker | | ✓ | ✓ | ✓ | ✓ |
|
|
|
|
|
| Manage labels | | ✓ | ✓ | ✓ | ✓ |
|
2016-02-23 10:13:12 -05:00
|
|
|
| See a commit status | | ✓ | ✓ | ✓ | ✓ |
|
2015-07-24 14:59:02 -04:00
|
|
|
| Manage merge requests | | | ✓ | ✓ | ✓ |
|
2014-04-24 18:48:22 -04:00
|
|
|
| Create new merge request | | | ✓ | ✓ | ✓ |
|
|
|
|
|
| Create new branches | | | ✓ | ✓ | ✓ |
|
|
|
|
|
| Push to non-protected branches | | | ✓ | ✓ | ✓ |
|
2014-11-26 15:19:19 -05:00
|
|
|
| Force push to non-protected branches | | | ✓ | ✓ | ✓ |
|
2014-04-24 18:48:22 -04:00
|
|
|
| Remove non-protected branches | | | ✓ | ✓ | ✓ |
|
|
|
|
|
| Add tags | | | ✓ | ✓ | ✓ |
|
|
|
|
|
| Write a wiki | | | ✓ | ✓ | ✓ |
|
2016-02-02 11:59:37 -05:00
|
|
|
| Cancel and retry builds | | | ✓ | ✓ | ✓ |
|
2016-02-23 10:13:12 -05:00
|
|
|
| Create or update commit status | | | ✓ | ✓ | ✓ |
|
2014-07-09 14:46:37 -04:00
|
|
|
| Create new milestones | | | | ✓ | ✓ |
|
2014-04-24 18:48:22 -04:00
|
|
|
| Add new team members | | | | ✓ | ✓ |
|
|
|
|
|
| Push to protected branches | | | | ✓ | ✓ |
|
2014-09-19 03:58:22 -04:00
|
|
|
| Enable/disable branch protection | | | | ✓ | ✓ |
|
2014-12-29 04:44:08 -05:00
|
|
|
| Turn on/off prot. branch push for devs| | | | ✓ | ✓ |
|
2014-04-24 18:48:22 -04:00
|
|
|
| Rewrite/remove git tags | | | | ✓ | ✓ |
|
|
|
|
|
| Edit project | | | | ✓ | ✓ |
|
2014-09-19 03:58:22 -04:00
|
|
|
| Add deploy keys to project | | | | ✓ | ✓ |
|
|
|
|
|
| Configure project hooks | | | | ✓ | ✓ |
|
2016-02-02 11:59:37 -05:00
|
|
|
| Manage runners | | | | ✓ | ✓ |
|
|
|
|
|
| Manage build triggers | | | | ✓ | ✓ |
|
|
|
|
|
| Manage variables | | | | ✓ | ✓ |
|
2014-04-24 18:48:22 -04:00
|
|
|
| Switch visibility level | | | | | ✓ |
|
|
|
|
|
| Transfer project to another namespace | | | | | ✓ |
|
|
|
|
|
| Remove project | | | | | ✓ |
|
2014-11-26 15:19:19 -05:00
|
|
|
| Force push to protected branches | | | | | |
|
2014-12-29 05:29:06 -05:00
|
|
|
| Remove protected branches | | | | | |
|
2014-04-24 18:48:22 -04:00
|
|
|
|
2016-02-02 11:59:37 -05:00
|
|
|
[^1]: If **Allow guest to access builds** is enabled in CI settings
|
|
|
|
|
|
2014-04-24 18:48:22 -04:00
|
|
|
## Group
|
|
|
|
|
|
2015-03-25 06:18:44 -04:00
|
|
|
In order for a group to appear as public and be browsable, it must contain at
|
|
|
|
|
least one public project.
|
|
|
|
|
|
|
|
|
|
Any user can remove themselves from a group, unless they are the last Owner of the group.
|
|
|
|
|
|
2014-04-24 18:48:22 -04:00
|
|
|
| Action | Guest | Reporter | Developer | Master | Owner |
|
|
|
|
|
|-------------------------|-------|----------|-----------|--------|-------|
|
|
|
|
|
| Browse group | ✓ | ✓ | ✓ | ✓ | ✓ |
|
|
|
|
|
| Edit group | | | | | ✓ |
|
|
|
|
|
| Create project in group | | | | ✓ | ✓ |
|
|
|
|
|
| Manage group members | | | | | ✓ |
|
|
|
|
|
| Remove group | | | | | ✓ |
|
2016-03-14 19:11:20 -04:00
|
|
|
|
|
|
|
|
## External Users
|
|
|
|
|
|
2016-03-17 03:24:06 -04:00
|
|
|
In cases where it is desired that a user has access only to some internal or
|
|
|
|
|
private projects, there is the option of creating **External Users**. This
|
|
|
|
|
feature may be useful when for example a contractor is working on a given
|
|
|
|
|
project and should only have access to that project.
|
|
|
|
|
|
|
|
|
|
External users can only access projects to which they are explicitly granted
|
|
|
|
|
access, thus hiding all other internal or private ones from them. Access can be
|
|
|
|
|
granted by adding the user as member to the project or group.
|
|
|
|
|
|
|
|
|
|
They will, like usual users, receive a role in the project or group with all
|
|
|
|
|
the abilities that are mentioned in the table above. They cannot however create
|
|
|
|
|
groups or projects, and they have the same access as logged out users in all
|
|
|
|
|
other cases.
|
|
|
|
|
|
|
|
|
|
An administrator can flag a user as external [through the API](../api/users.md)
|
|
|
|
|
or by checking the checkbox on the admin panel. As an administrator, navigate
|
|
|
|
|
to **Admin > Users** to create a new user or edit an existing one. There, you
|
|
|
|
|
will find the option to flag the user as external.
|
