Can git fetch steps be proxied?

[edahlseng]

Is there a way to use git-proxy for fetch commands?

I'd love to be able to implement path-based access control features for our monorepo, but have not found any solutions to this yet. If git-proxy could be used for git fetch commands, however, then it may be possible to only allow fetches that use Git's sparse-checkout feature. In effect, this could enforce path-based access control, only allowing a fetch to work if the requesting user is requesting paths that they are allowed to have access to.

[kriswest]

Git Proxy is able to proxy all Git commands - you set up the git proxy URL for a project as a remote and send all your commands through it. Every request passes through the proxyFilter and has executeChain called on it which will then run the the push, pull or default processor chains on it.

At the moment:

• the pull and default chains just check that the repository has been added to git proxy (so it will only proxy requests for configured repos)
• you can write plugins to be added to either the push or pull chains

Hence, you could write a plugin that enforced path-based access for pulls, but not yet fetches - we'd either need a new chain for that or to add support for plugins on the default chain (applied to everything other than pushes and pulls).

[kriswest]

Closing as answered - feel free to reopen if you want to make a concrete request for or contribution of an addition in this area