RE: Loophole in cvs_acls script allows restricted files to be com mitted

[Peter Connolly]

> 2. Change the way you write your acls. Your behavior will be more in
> line with what you expect if you write your unavail 
> directives based on
> directories rather than files. So to achieve what you want:
> unavail CVSROOT
> avail|cvsadmin|CVSROOT/avail
> avail|wimpy|CVSROOT/loginfo
> <<<EOF
> 
> I'd recommend option 2 here, or better yet, just using filesystem
> permissions if you can.
> 
> Hope this helps,
> 
> Geoff
>

Thanks Geoff. Indeed a rejiggering of my avail file solves my problem.

We'll probably use the filesystem permissions approach later, after we've 
refactored some of our restricted classes into separate directories... 

Btw, as you noted, I confirmed that the use of the null commit message command 
option -m"" does seem to trigger the directory-wide commits instead of the 
requested file-specific commit.  Verrrry interesting.