Unwanted access to gitolite-admin repository

[ghost]

Hi,

I think there is a security issue since every user with sufficient rights can create a project named 'gitolite-admin' and create a main git repository which will give him access to the gitolite-admin repository (which let him manage rights of every repositories).

I think this issue exists at least since the commit 098275c but I don't know if it was possible before.

Best regards,

Ludovic Schoepps.

[n-rodriguez]

Hi there! Thanks for your feedback!

I think this issue exists at least since the commit 098275c but I don't know if it was possible before.

I think this has always been possible.