Struct RoleMap 

pub struct RoleMap { /* private fields */ }

Which forge role each repository tier asks for, before the forge’s ladder is applied (§4.2’s “GitHub projection (org)” column is the default).

This is the community hook of §5.8 layer 3: a bridge, a namespace or a repository may override the map (maintain → write on Forgejo instead of write plus the merge allow-list, or committers get write on a repository that opts in to branch-based contribution) without code.

There is no entry for git.ns.admin, by design (decided 2026-09-25): a namespace admin gets no forge role, so no map can give them one. An nsAdmin key is refused when a map is read.

A map is always ordered — own ≥ maintain ≥ commit — and only own may map to ForgeRole::Admin (git-ns/bridge/job 0.4): maintain and commit are rights their holder may grant themselves, so either at admin would let someone make themselves an administrator of the repository on the forge on their own authority. A committer gets at most write: the check, not the forge role, decides whose commits land, and a committer with merge rights would be a maintainer. RoleMap::new and deserialisation both enforce this, and the fields are private so that no map can be changed afterwards to one they would refuse.

Implementations

impl RoleMap

pub const MAX_COMMIT: ForgeRole = ForgeRole::Write

The highest role a committer may be given.

pub fn new( own: ForgeRole, maintain: ForgeRole, commit: ForgeRole, ) -> Result<Self, String>

A map giving own, maintain and commit to the three tiers. Refused unless own ≥ maintain ≥ commit, maintain is below admin and commit ≤ write.

pub fn own(&self) -> ForgeRole

Role for git.repo.own.

pub fn maintain(&self) -> ForgeRole

Role for git.repo.maintain. Never ForgeRole::Admin.

pub fn commit(&self) -> ForgeRole

Role for git.commit.sign. None by default: committers contribute through fork PRs, and the required check — not a forge role — decides whether their commits land. At most RoleMap::MAX_COMMIT.

pub fn with_committer_write() -> Self

The default map with committers given write — for a repository that opts in to branch-based contribution.

pub fn requested(&self, rights: EffectiveRights) -> ForgeRole

The role the rights ask for, before any ladder is applied. Only repository rights granted in their own name count (EffectiveRights::forge_tier): ns.admin alone asks for ForgeRole::None.

Trait Implementations

impl Clone for RoleMap

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for RoleMap

impl Debug for RoleMap

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for RoleMap

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for RoleMap

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for RoleMap

impl PartialEq for RoleMap

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for RoleMap

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for RoleMap