From ba03d4fdd4f770f715cc4d71c7794b69808fdcc4 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Victor=20Mu=C5=A1tar?= Date: Wed, 15 Jul 2026 18:31:37 +0200 Subject: [PATCH 1/5] Document publisher gating download blocking and blocked regions --- .../enterprise-gating-group-collections.md | 21 ++++++++++++++++++- 1 file changed, 20 insertions(+), 1 deletion(-) diff --git a/docs/hub/enterprise-gating-group-collections.md b/docs/hub/enterprise-gating-group-collections.md index 0124214603..096315fdc0 100644 --- a/docs/hub/enterprise-gating-group-collections.md +++ b/docs/hub/enterprise-gating-group-collections.md @@ -143,7 +143,26 @@ Organizations can customize the gating parameters as well as the user informatio ## Advanced settings -Enterprise Plus organizations can define **blocked countries** to automatically reject access requests across their gated models and datasets. This setting is available in the **Publisher Analytics** settings, under the **Advanced Gating** tab. +Enterprise Plus organizations can block visitors from specific locations across all of their models and datasets. These settings live in the **Publisher Analytics** settings, under the **Advanced Gating** tab. + +### Blocked locations + +Two lists define the blocked locations: + +- **Blocked countries**: countries, identified by their [ISO 3166-1 alpha-2](https://en.wikipedia.org/wiki/ISO_3166-1_alpha-2) code. +- **Blocked regions**: specific territories to block in addition to the countries above, for territories that are not distinct countries and therefore cannot be selected in the list above. The available regions are Crimea, Sevastopol, Donetsk and Luhansk. + +### Enforcement + +The **Enforcement** setting controls what blocked visitors are denied: + +- **Gated repositories**: access requests to the organization's gated repositories are auto-rejected. +- **All repositories**: in addition to auto-rejecting access requests, downloads are denied on every repository of the organization, including public ones. Blocked visitors see a "not available in your region" notice on the repository page, and the dataset viewer is disabled for them. + +Enforcement applies to visitors from the blocked countries and regions, whether or not they are signed in. Members of the organization are not exempt. + +> [!TIP] +> Blocking is based on IP geolocation, which is best-effort. Use it to enforce a policy, not as a hard security boundary. ## Access gated repos in a Gating Group Collection as a user From 7e3cdcc0d647e516928e1e2eb0746634d1d4040f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Victor=20Mu=C5=A1tar?= Date: Wed, 15 Jul 2026 18:32:48 +0200 Subject: [PATCH 2/5] Don't enumerate the available blocked regions --- docs/hub/enterprise-gating-group-collections.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/hub/enterprise-gating-group-collections.md b/docs/hub/enterprise-gating-group-collections.md index 096315fdc0..1148e10a70 100644 --- a/docs/hub/enterprise-gating-group-collections.md +++ b/docs/hub/enterprise-gating-group-collections.md @@ -150,7 +150,7 @@ Enterprise Plus organizations can block visitors from specific locations across Two lists define the blocked locations: - **Blocked countries**: countries, identified by their [ISO 3166-1 alpha-2](https://en.wikipedia.org/wiki/ISO_3166-1_alpha-2) code. -- **Blocked regions**: specific territories to block in addition to the countries above, for territories that are not distinct countries and therefore cannot be selected in the list above. The available regions are Crimea, Sevastopol, Donetsk and Luhansk. +- **Blocked regions**: specific territories to block in addition to the countries above, for territories that are not distinct countries and therefore cannot be selected in the list above. ### Enforcement From 0ff705553b38bcdd44fefba99d51313e1d4b169a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Victor=20Mu=C5=A1tar?= Date: Wed, 15 Jul 2026 18:33:10 +0200 Subject: [PATCH 3/5] Remove IP geolocation tip --- docs/hub/enterprise-gating-group-collections.md | 3 --- 1 file changed, 3 deletions(-) diff --git a/docs/hub/enterprise-gating-group-collections.md b/docs/hub/enterprise-gating-group-collections.md index 1148e10a70..3fc4737219 100644 --- a/docs/hub/enterprise-gating-group-collections.md +++ b/docs/hub/enterprise-gating-group-collections.md @@ -161,9 +161,6 @@ The **Enforcement** setting controls what blocked visitors are denied: Enforcement applies to visitors from the blocked countries and regions, whether or not they are signed in. Members of the organization are not exempt. -> [!TIP] -> Blocking is based on IP geolocation, which is best-effort. Use it to enforce a policy, not as a hard security boundary. - ## Access gated repos in a Gating Group Collection as a user A Gated Group Collection shows a specific icon next to its name: From 5b1acfd64a4840b180daed3b28e8c4db5b85f524 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Victor=20Mu=C5=A1tar?= Date: Tue, 21 Jul 2026 14:36:47 +0200 Subject: [PATCH 4/5] Update docs/hub/enterprise-gating-group-collections.md Co-authored-by: Julien Chaumond --- docs/hub/enterprise-gating-group-collections.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/hub/enterprise-gating-group-collections.md b/docs/hub/enterprise-gating-group-collections.md index 3fc4737219..009f43504d 100644 --- a/docs/hub/enterprise-gating-group-collections.md +++ b/docs/hub/enterprise-gating-group-collections.md @@ -143,7 +143,7 @@ Organizations can customize the gating parameters as well as the user informatio ## Advanced settings -Enterprise Plus organizations can block visitors from specific locations across all of their models and datasets. These settings live in the **Publisher Analytics** settings, under the **Advanced Gating** tab. +Enterprise Plus organizations can automatically reject or block visitors from specific locations across all of their models and datasets. These settings live in the **Publisher Analytics** settings, under the **Advanced Gating** tab. ### Blocked locations From f8104760c16845a724d7f4b04496fbdb5327a69c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Victor=20Mu=C5=A1tar?= Date: Tue, 21 Jul 2026 14:36:55 +0200 Subject: [PATCH 5/5] Update docs/hub/enterprise-gating-group-collections.md Co-authored-by: Julien Chaumond --- docs/hub/enterprise-gating-group-collections.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/docs/hub/enterprise-gating-group-collections.md b/docs/hub/enterprise-gating-group-collections.md index 009f43504d..790d245380 100644 --- a/docs/hub/enterprise-gating-group-collections.md +++ b/docs/hub/enterprise-gating-group-collections.md @@ -145,13 +145,6 @@ Organizations can customize the gating parameters as well as the user informatio Enterprise Plus organizations can automatically reject or block visitors from specific locations across all of their models and datasets. These settings live in the **Publisher Analytics** settings, under the **Advanced Gating** tab. -### Blocked locations - -Two lists define the blocked locations: - -- **Blocked countries**: countries, identified by their [ISO 3166-1 alpha-2](https://en.wikipedia.org/wiki/ISO_3166-1_alpha-2) code. -- **Blocked regions**: specific territories to block in addition to the countries above, for territories that are not distinct countries and therefore cannot be selected in the list above. - ### Enforcement The **Enforcement** setting controls what blocked visitors are denied: @@ -161,6 +154,13 @@ The **Enforcement** setting controls what blocked visitors are denied: Enforcement applies to visitors from the blocked countries and regions, whether or not they are signed in. Members of the organization are not exempt. +### Blocked locations + +Two lists define the blocked locations: + +- **Blocked countries**: countries, identified by their [ISO 3166-1 alpha-2](https://en.wikipedia.org/wiki/ISO_3166-1_alpha-2) code. +- **Blocked regions**: specific territories to block in addition to the countries above, for territories that are not distinct countries and therefore cannot be selected in the list above. + ## Access gated repos in a Gating Group Collection as a user A Gated Group Collection shows a specific icon next to its name: