title: How to restrict Gerrit access to only a few Google email addresses?
body: <p>I would like only a few persons all having Google email addresses to be able to do source code review on our Gerrit server. All other access to the Gerrit server should be blocked.</p>
  
  <p>These Google email addresses are published on the public web site of our work office so the email addresses themselves can't be kept secret.</p>
  
  <p>I would like to avoid LDAP for the Gerrit configuration, as it adds too much of complexity (in my opinion).</p>
  
  <p>I started out by creating an Amazon EC2 instance running Ubuntu 14.04. I then configured the  Amazon EC2 firewall to block all access to the instance other than from the IP address of my local desktop computer. Of course this needs to be changed later when the Gerrit server has been properly configured. The allowed users should be able to access the Gerrit server from anywhere in the world so later there will be no IP address restriction.</p>
  
  <p>The Gerrit configuration looks like this right now:</p>
  
  <pre><code>$ grep -A1 auth ~/gerrit/etc/gerrit.config
  [auth]
      type = OPENID
  </code></pre>
  
  <p>It seems Google has <a href="https://developers.google.com/accounts/docs/OpenID2" rel="nofollow">deprecated its OpenID 2.0 service</a> so I couldn't log in to the Gerrit web interface with my Google email address directly. But instead I could log in by first signing up on the <a href="https://pip.verisignlabs.com/" rel="nofollow">Verisingslabs OpenID provider</a> website.</p>
  
  <p>What are the configuration steps necessary to give only a few Google email addresses read-write access but blocking all other kinds of access to the Gerrit server?</p>