英语翻译Asystemwideaccesscontrollistaffectingallprojectsisstoredinproject"All-Projects".Thisinheritancecanbeconfiguredthroughgerritset-project-parent.Per-projectaccesscontrollistsarealsosupported.Usersarepermittedtou

Question

英语翻译
A system wide access control list affecting all projects is stored in project "All-Projects".This inheritance can be configured through gerrit set-project-parent.
Per-project access control lists are also supported.
Users are permitted to use the maximum range granted to any of their groups in an approval category.For example,a user is a member of Foo Leads,and the following ACLs are granted on a project:
.
Then the effective range permitted to be used by the user is -2..+2,as the user is a member of all three groups (see above about the system groups) and the maximum range is chosen (so the lowest value granted to any group,and the highest value granted to any group).
Reference-level access control is also possible.
Permissions can be set on a single reference name to match one branch (e.g.refs/heads/master),or on a reference namespace (e.g.refs/heads/*) to match any branch starting with that prefix.So a permission with refs/heads/* will match refs/heads/master and refs/heads/experimental,etc.
Reference names can also be described with a regular expression by prefixing the reference name with ^.For example ^refs/heads/[a-z]{1,8} matches all lower case branch names between 1 and 8 characters long.Within a regular expression .is a wildcard matching any character,but may be escaped as \..The dk.brics.automaton library is used for evaluation of regular expression access control rules.See the library documentation for details on this particular regular expression flavor.
References can have the current user name automatically included,creating dynamic access controls that change to match the currently logged in user.For example to provide a personal sandbox space to all developers,refs/heads/sandbox/${username}/* allowing the user joe to userefs/heads/sandbox/joe/foo.

Answer 1

一个系统范围的访问控制列表影响所有的项目都存储在项目”所有的项目”.这种继承可以通过设置项目父配置gerrit.项目也支持访问控制列表,
项目也支持访问控制列表.用户被允许使用最大射程授予任何他们的团体在一个批准类别.例如,一个用户是一个成员的领导,下面Foo acl被授予一个项目:
那么有效范围允许用户使用的是2 ..+ 2,因为用户所属的所有三组(见上文关于系统的组织)和最大射程选用(因此最低授予任何集团价值的最高价值授予任何集团).基准级访问控制也是可能的.
权限可以设置在一个引用名称匹配一个分支(例如refs /头/主),或在一个引用名称空间(例如refs /头/ *)匹配任何分支从该前缀.所以一个许可和refs /头/ *将匹配refs /头/主和refs /头/实验,等引用名称也可以被描述为一个正则表达式通过引用名称前缀与^.例如refs / ^[a - z]的头/ { 1,8 }匹配所有小写分支名称1到8个字符长.在一个正则表达式.是一个通配符匹配任何字符,但可能是转义成\ ..dk金砖四国的.自动机库是用来评估正则表达式访问控制规则.看到库文档了解详细信息在这个特定的正则表达式风味.引用可以有当前用户名自动包括,创建动态访问控制,改变以匹配铜