Restricting use of 'cvs rtag' & 'cvs tag' commands

[David Leskovac]

Hello,

We are currently using an ancient version of CVS (1.11.1p1) on a rather old 
Linux server (Red Hat 6). I intend to upgrade to CVS 1.11.19 & eventually 
upgrade the Linux OS. In the course of our CVS upgrade discussion we started 
discussing how to increase security with regards to CVS access. I am aware of 
the cvsacls script that provides fairly fine-grained permissions to do 
check-ins but is there also a way of restricting who is allowed to do certain 
cvs commands? In particular, we would like to restrict who can create/delete 
tags & branch tags. Is it possible to restrict 'cvs tag' & 'cvs rtag' on a user 
or group level?

Thanks,
-Dave