Re: how to implement user level security in cvs ?

[Larry Jones]

Muhammad Shakeel writes:
> 
> There is no security for user level permission on a different modules in 
> a cvs repository. If i had to use the unix permissions for  security , 
> then what are the steps i should follow to permit some groups or users 
> for check out access only and to some with checkin access only ?

The short answer is that a user needs write permission on a directory to
modify any of the files in that directory and needs read permission on a
directory to access the files without changing them (checkout, status,
etc.).  Users do need read permission on the files themselves, but do
should never have write permission.  Users also have to be able to
create lock files, so if you're going to have read-only users, you can't
keep the lock files inside the repository; you can use LockDir= in
CVSROOT/config to put them elsewhere.

-Larry Jones

Let's pretend I already feel terrible about it, and that you
don't need to rub it in any more. -- Calvin