I’m testing the new Docker Registry feature with my Gitlab installation and I’m a little bit lost with permissions.
I want to share Docker images with everyone, so my project has a Visibility Level set to Public.
First case, someone with no docker-login : pull OK / push KO as expected.
Second case, someone with a docker-login, with Owner permission on the project : pull OK / push OK as expected
Third case, someone with a docker-login, without any permission on the project : pull KO / push unknown
Is that normal, that an “unknown user” has more privileges than my authenticated user ?