Goal:-
I have a team Boss (user1, user2) which has repo r1 and r2. The team has full access to r1 and r2. I need to give access to user3 for only r2. In the r2 settings, I will give user3 the desired access rights.
Approach:
For the user3 to access r2 I added his pub key to team Boss. Now, user3 can clone the branch r2 using his id and the access rights will apply. But if somehow user3 get the other repo URLs he cannot only clone them but do check-ins, as his pub key is at the team level.
Is this a wrong approach for the goal? Please suggest.
How to prevent user3 not to clone even if he has the clone url for r1?
