about git push -f

[mojie126]

Wishing to increase the authority to control compulsory push restrictions

[zeripath]

It's not quite clear what you're asking. Gitea has protected branches so only certain users can push to that branch. Are you talking about adding a git hook for push - as in an arbitrary script that will check a commit and ensure that it passes some test?

OK, well obviously we can't produce a UI for that - it would mean allowing users to arbitrarily upload scripts that would be run on push. If you are the administrator and owner of the gitea server you should be able to edit the repository on the filesystem to add such a git hook - however remember that will be run during pushes so could lock the system.

Another option is to use the Gitea webhook system - the push will be accepted and then a webhook will be called which could then checkout the pushed commits and do the tests - it could then comment back on a PR or automatically push on to the master.

[lunny]

@zeripath I think he means we should add an option on protected branch to disallow users who have push permission to force push. @mojie126 Is that your issue?

[mojie126]

是的，限制强制推送，可以控制谁能强制推送...

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs during the next 2 weeks. Thank you for your contributions.

[lafriks]

But when setting protected branch it will already be protected from forced push even if set that user are allowed to do push to that branch

[lunny]

@lafriks I think @mojie126 means he want to give somebody push permission but cannot force push. Currently gitea didn't split them as two options.

[lafriks]

But it already works this way. If I specify branch protection and whitelist user who can push to that branch that user will be able to push new commits but won't be able to force push

[0x5c]

Could it be that the OP is asking for a repository setting? Ie: blanket denying of force-pushes

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs during the next 2 weeks. Thank you for your contributions.

[davidsvantesson]

I think this would be solved with the combination of setting writers as push whitelist (similar as suggested in #8288) and wildcard branch protection (#2529). Then you can disable force pushing of the complete repository but still allow normal pushes.

[lunny]

How to allow someone could push but cannot force push then?

[davidsvantesson]

There is already a database element for this; CanPush in ProtectedBranch. Currently it is always false (not used in any way)

[davidsvantesson]

What seem to be wanted here (google translated from Chinese):

Yes, limit forced push, you can control who can force push...

I don't see the point of enabling force pushing for everyone to a protected branch (that would be like not protecting the branch). So it does only make sense in combination of a whitelist. And I suppose it should be different whitelists for who can push normal and who can force push? What is the use case here?

[mrsdizzie]

closing per lack of feedback