Re: Read Only User Tagging Files?

[Mark D. Baushke]

Eric Siegerman <address@hidden> writes:

> On Wed, Jan 08, 2003 at 09:05:00AM -0600, address@hidden wrote:
> > I have a user with read only access to CVS.  I want him to have the ability
> > to write(commit) to one specific file and to tag all files in the
> > repository while retaining his read only access to everything else.  Is
> > this possible?
> 
> No:
>   - You can't give "tag" permission without "commit".  You can
>     only allow or disallow *all* writes, not selectively.

This is only partially true. You could cause a commitinfo trigger script
to exit with a non-zero return code if he ever tried to modify any file
other than the permitted file. This would prevent commits to the other
files and still allow a particular file to be committed.

However, you should note that, if he has access to the repository file
itself he could modify other files by tagging the files to become the
'owner' and then modifying the files directly.

>   - You can give a user write (= commit + tag + delete + ...)
>     access to only one directory, but not to one file within a
>     directory.  Because of the way CVS works, it's the
>     directory's permissions that matter, not those of the
>     individual files.

Unless you add in the administrative control via a commitinfo or taginfo
trigger.

        Enjoy!
        -- Mark