Re: HOwdo I restrict access to different directories within one repository?

[Brian Poynor]

On Fri, Apr 05, 2002 at 05:58:02PM -0000, vishalvenkatram wrote:
> We are in the process of implementing Win CVS here.
> I have been able to create a repository and am in the process of 
> creating directory structure within the repository.
> I wish to give users selective rights on some of the directories.
> Like only a check out from certain directories and no check in's.
> Pls help.
> Vishal

You can't do this with the directory permissions, because write access
is needed to create locks in order to checkout (read) the repository. 
(A possible loophole is using an alternate directory for locks.)

You also can't do this very well using pserver coupled with the
CVSROOT/writers and CVSROOT/readers files, because those apply to all
the repositories within that root.

However, you can enforce the most arbitrary of rules using the
commitinfo framework. You can obtain the directory being committed
from the CVS/Repository file below the current directory. Use whatever
kind of database you can devise to determine if the user is allowed to
commit to that directory.

Beware that cvs 1.9 & 1.10 can have the absolute path, and 1.11+ have
relative paths (from $CVSROOT) in CVS/Repository, and there may be
variations between local (disk/nfs) access and remote (pserver, etc.)
access for older versions. If you have to work with more than one
method... test, test, test. 

Good luck to you,
-Brian