Branch restrictions in Stash

[Vijay kumar]

We have recently started working on Stash and currently evaluating how we can restrict write access on branches in a GIT repositories using Stash. Using the Branch Permission option in Stash, we added only certain users to have write access to the Branch...but surprisingly, even after such a setting, all users are able to push their changes to this branch. Are we missing something here ? 

  Note: We are having v3.3.1 Stash instance for evaluation.

[Mark McCormack (Adaptavist)]

Vijay,

If you are specifically looking for Branch permission options I'd recommend upgrade to at least Stash 3.10 because there is a significant change towards this in the release. Please see the release notes for more information. I hope that helps.

https://confluence.atlassian.com/stash/stash-3-10-release-notes-749314613.html

[Vijay kumar]

Branch Permissions.

Branch-Permissions.jpg

Commits Made After Branch Permissions Were Defined

Commits-Made-After-Branch-Permissions-Where-Changed.jpg

[Vijay kumar]

Hi

Attaching the screenshot of branch permission setting as well as the commits that were made after this setting was made.

CommitsMadeAfterPermisisonsWereSet.jpgBranchPermission.jpg

[Tim Crall]

I can't read those

[Vijay kumar]

I am re-attaching the screenshots. Please advise

[Tim Crall]

That looks like it should work. Not sure why it isn't; sorry...

[Vijay kumar]

Hi Mark,

Thanks for your advise. We did upgrade our stash instance to 3.11.2. Again there, I see that a developer for whom is not on the list of valid users with write access to a branch (in our case master branch) is able to push the changes to this restricted branch. Is there any how, i can check what is happening behind the scene so that I can decipher this issue.

[Mark McCormack (Adaptavist)]

Vijay,

As Tim Crall asked, could you please share a screenshot of your branch settings screen?

[Tim Crall]

That seems very odd. Maybe include a screenshot of your branch settings screen? If you've set them up correctly, then people not on the list should not be able to push to that branch.