Artifact ca5c37d1b2b9f86998b7c5946de0fd1884474cef73179fda766dae8c347bacd0:
- File
www/reference.html
— part of check-in
[63ec7d6dc8]
at
2026-08-26 16:14:20
on branch serve-protected-branches
— serve: refuse membership changes to protected branches, per request, from a trusted front
A front that authenticates every push knows who is pushing; the store knows which branch a pushed check-in resolves to. The front sends only the rule -- X-Zit-Protect, a glob list -- and zit serve --fronted refuses the whole round when a check-in would join one of those branches or a tag would move a held check-in in or out of one. Same error card as a content-policy refusal, so a stock fossil client reads it.
Without --fronted the header is ignored and the server is unchanged. Nothing new on the wire or in the repository. Resolution is crosslink's own, through the fast-read image, which maintain keeps warm between connections. A parent not yet held is admitted: it is judged on arrival. Resolver faults fail closed. Issue #151. (user: dmestas, size: 114757) [annotate] [blame] [check-ins using] [more...]