Re: disabling branch commit

[Mark D. Baushke]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Fernando Silveira <address@hidden> writes:

> Great! Thank you! Good job! I liked your script very much, it fully
> suited my needs.
> 
> Now what I need is a little easier than this. I can do it but I wonder
> if there is another script that uses the same `cvsacl' file to do it:
> Is there a script that denies checkouts also instead of just
> committing?

No. Checkout is based on standard UNIX filesystem permissions. Anyone
who is able to 'see' the ,v files that comprise the directories you care
about will be able to do checkouts. Some mitigation may be possible
using the CVSROOT/config LockDir= directive to give you a different
directory than the normal repository in which lock files may be created.

So, for example, you might be able to change the default permissions on
that LockDir tree to disable the ability to do checkouts because the
users will not be able to create read lock files...

It is cheaper just to hire people you trust to work on your software or
to setup a separate machine to be the repository master with a more
restricted list of users if you have some contractual obligation to
avoid having prying eyes looking at the sources.

        Good luck,
        -- Mark
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (FreeBSD)

iD8DBQFBRfnm3x41pRYZE/gRAmeCAKDDGiX1IEsBVXfo/XrLplay++16tgCgiN5U
drbKXGVhzsoP9j1AN0lo+ts=
=ABYp
-----END PGP SIGNATURE-----