diff --git a/docs/buildsys/git.md b/docs/buildsys/git.md index 91cebe5..e323786 100644 --- a/docs/buildsys/git.md +++ b/docs/buildsys/git.md @@ -59,6 +59,19 @@ Assuming that we are given a [list](https://pagure.io/centos-infra/issue/393), w cat kmod-list |while read project ; do pagure-batch-create-repo $project "the $project repo" rpms prod;done ``` +## Modifying ACLs on projects + +While automatic ACLs coming from pagure-dist-git are in place to allow/deny SIG groups to push to some branches by default, pagure needs itself to be aware that some groups can review Pull Requests and merge these. For that we have to grant the 'commit' rights on specific projects (SIGs will still be disallowed to merge to protected branches). +To do that one can use [simple and interactive](https://github.com/CentOS/infra-scripts/blob/master/pagure/pagure-acl-mod) or [batch](https://github.com/CentOS/infra-scripts/blob/master/pagure/pagure-batch-acl-mod) script, still using same config file as described above. + +If we have to do that for a list, we can for example use the `pagure-batch-acl-mod` script : + +``` +fas_group="sig-hyperscale" +namespace="rpms" +cat pagure-acl.list |while read project ; do echo pagure-batch-acl-mod $namespace $project $fas_group prod ; done +``` + ## Infra notes