Merge branch 'da-clarify-subgroup-permissions' into 'master'
Clarify subgroup permissions See merge request gitlab-org/gitlab-ce!21769
This commit is contained in:
commit
e8e1a51add
|
@ -1,9 +1,8 @@
|
||||||
# Subgroups
|
# Subgroups
|
||||||
|
|
||||||
> **Notes:**
|
NOTE: **Note:**
|
||||||
> - [Introduced][ce-2772] in GitLab 9.0.
|
[Introduced][ce-2772] in GitLab 9.0. Not available when using MySQL as external
|
||||||
> - Not available when using MySQL as external database (support removed in
|
database (support removed in GitLab 9.3 [due to performance reasons][issue]).
|
||||||
> GitLab 9.3 [due to performance reasons][issue]).
|
|
||||||
|
|
||||||
With subgroups (aka nested groups or hierarchical groups) you can have
|
With subgroups (aka nested groups or hierarchical groups) you can have
|
||||||
up to 20 levels of nested groups, which among other things can help you to:
|
up to 20 levels of nested groups, which among other things can help you to:
|
||||||
|
@ -79,14 +78,14 @@ structure.
|
||||||
|
|
||||||
## Creating a subgroup
|
## Creating a subgroup
|
||||||
|
|
||||||
> **Notes:**
|
NOTE: **Note:**
|
||||||
> - You need to be an Owner of a group in order to be able to create
|
You need to be an Owner of a group in order to be able to create a subgroup. For
|
||||||
> a subgroup. For more information check the [permissions table][permissions].
|
more information check the [permissions table][permissions].
|
||||||
> - For a list of words that are not allowed to be used as group names see the
|
For a list of words that are not allowed to be used as group names see the
|
||||||
> [reserved names][reserved].
|
[reserved names][reserved].
|
||||||
> - Users can always create subgroups if they are explicitly added as an Owner to
|
Users can always create subgroups if they are explicitly added as an Owner to
|
||||||
> a parent group even if group creation is disabled by an administrator in their
|
a parent group even if group creation is disabled by an administrator in their
|
||||||
> settings.
|
settings.
|
||||||
|
|
||||||
To create a subgroup:
|
To create a subgroup:
|
||||||
|
|
||||||
|
@ -136,12 +135,15 @@ From the image above, we can deduct the following things:
|
||||||
|
|
||||||
### Overriding the ancestor group membership
|
### Overriding the ancestor group membership
|
||||||
|
|
||||||
>**Note:**
|
NOTE: **Note:**
|
||||||
You need to be an Owner of a group in order to be able to add members to it.
|
You need to be an Owner of a group in order to be able to add members to it.
|
||||||
|
|
||||||
|
NOTE: **Note:**
|
||||||
|
A user's permissions in a subgroup cannot be lower than in any of its ancestor groups.
|
||||||
|
Therefore, you cannot reduce a user's permissions in a subgroup with respect to its ancestor groups.
|
||||||
|
|
||||||
To override a user's membership of an ancestor group (the first group they were
|
To override a user's membership of an ancestor group (the first group they were
|
||||||
added to), simply add the user in the new subgroup again, but with different
|
added to), add the user to the new subgroup again with a higher set of permissions.
|
||||||
permissions.
|
|
||||||
|
|
||||||
For example, if User0 was first added to group `group-1/group-1-1` with Developer
|
For example, if User0 was first added to group `group-1/group-1-1` with Developer
|
||||||
permissions, then they will inherit those permissions in every other subgroup
|
permissions, then they will inherit those permissions in every other subgroup
|
||||||
|
|
Loading…
Reference in New Issue