Allow only admins to enable repositories

I don’t really understand what DRONE_ORGS means? Documentation isn’t perfect…

I thought that only repositories from these groups are considered to be enabled for drone ci builds. No?

So, anyone who can sign in into drone ui can enable there repositories, but i don’t like such behaviour, i would like only admins to check repositories that are legal for builds

The DRONE_ORGS parameter limits login to individuals that are members of the whitelisted organizations.

Ok, so this parameter works if DRONE_OPEN=true

Anyway, is it possible to say drone server to include only repositories that exist in DRONE_ORGS?

Another question, as i understand right the only one way to provide secrets to pipeline is adding secrets to repository, right? I’ve found your issue that says you want to add possibility to add secrets for whole organization, is it possible?

These capabilities both exist in the enterprise edition.

you want to add possibility to add secrets for whole organization

see http://docs.drone.io/setup-global-secrets/

is it possible to say drone server to include only repositories that exist in DRONE_ORGS

see http://docs.drone.io/custom-access-policies/