Архітектура програмного модуля гібридного контролю доступу до Git-репозиторіїв

Abstract

This paper presents the results of designing a software module for hybrid access control to Git repositories. It substantiates the expediency of extending the classic role-based model with attribute-based policies at the level of individual branches. The presented architecture consists of a client web application, a server API, and an autonomous access gateway. The integration of server-side transaction interception mechanisms enables the dynamic validation of user permissions, taking into account time windows and branch masks. The research results confirm the effectiveness of prioritizing deny rules to ensure the integrity of the codebase. The obtained architectural solutions form the foundation for developing secure corporate code hosting platforms.