docs/batches: Document batchChanges.restrictMergeToAdmins setting#1581
Open
keegancsmith wants to merge 1 commit intomainfrom
Open
docs/batches: Document batchChanges.restrictMergeToAdmins setting#1581keegancsmith wants to merge 1 commit intomainfrom
keegancsmith wants to merge 1 commit intomainfrom
Conversation
Adds documentation for the new batchChanges.restrictMergeToAdmins site config option which restricts merge and auto-merge actions to site admins only. This is useful when using the Batch Changes GitHub App with elevated access, where the App may have write permissions to repositories that individual users do not. See sourcegraph/sourcegraph#9559 Note: This PR should only be merged once Sourcegraph 6.13 is released. Amp-Thread-ID: https://ampcode.com/threads/T-019c2344-7386-702e-8b12-7ec2de618f53 Co-authored-by: Amp <amp@ampcode.com>
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
bahrmichael
reviewed
Feb 3, 2026
|
|
||
| ### Restrict merge actions to site admins | ||
|
|
||
| When using the [Batch Changes GitHub App](#commit-signing-with-github-apps) with elevated access, the App may have write access to repositories that individual users do not. To restrict who can merge changesets via the Batch Changes UI, set the `batchChanges.restrictMergeToAdmins` site configuration option to `true`: |
Contributor
There was a problem hiding this comment.
I would recommend linking to https://sourcegraph.com/docs/batch-changes/configuring-credentials#github-apps for setting up github apps credentials, instead of linking to the chapter dedicated to commit signing.
bahrmichael
reviewed
Feb 3, 2026
|
|
||
| ## Restricting merge actions to site admins | ||
|
|
||
| When using the [Batch Changes GitHub App](/admin/config/batch-changes#commit-signing-with-github-apps) with elevated access, the App may have write access to repositories that individual users do not. To prevent non-admin users from merging changesets through the Batch Changes UI in repositories they wouldn't normally have merge permissions for, a site admin can set the [site configuration](/admin/config/site-config) property `"batchChanges.restrictMergeToAdmins"` to `true`. |
Contributor
There was a problem hiding this comment.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adds documentation for the new
batchChanges.restrictMergeToAdminssite config option which restricts merge and auto-merge actions to site admins only. This is useful when using the Batch Changes GitHub App with elevated access, where the App may have write permissions to repositories that individual users do not.See sourcegraph/sourcegraph#9559
Note: This PR should only be merged once Sourcegraph 6.13 is released.