[Newbie question] When LOGIN fails

[David A. Cobb]

Today I was working with a repository at the other end of an SSH tunnel.

My CVS LOGIN was rejected: "server denied access to ${CVSROOT}"

However, while experimenting with Xemacs/PCL-CVS I requested to STATUS,
and then to UPDATE my directories.  Both functions apparently worked.

Does this indicate that the login only applies to a comit?
Is this by design, or is it a big security hole?

David A. Cobb, Software Engineer, Public Access Advocate, All around nice guy.
Get my PGP key at
:<http://pgpkeys.mit.edu:11371/pks/lookup?op=get&search=superbiskit>
Fingerprint=0x{6E3E_DB8C_2E8C_4248_62B2_FE29_08EE_CF0A_3629_E954}
"By God's Grace I am a Christian man, by my actions a great sinner."
--The Way of a Pilgrim, R. M. French [tr.]
<---.----!----.----!----.----!----.----!----.----!----.----!----.---->