Community technical support mailing list was retired 2010 and replaced with a professional technical support team. For assistance please contact: Pre-sales Technical support via email to sales@march-hare.com.
Thanks for the reply Bo, Just to clarify...
I am hosting my cvs repository on a Linux box with a web host and I may
not run demon processes.
Thus I am using the :ssh: protocol in my cvs root, which works without
the need for the cvs process to run as a demon on the server. I am not
using a SAMBA or any other form of file share.
( :local: I am only using for testing purposes from shell accounts
directly on the linux box.)
The ACL permissions (e.g. - u joe -a noread ) I am applying are being
acknowledged, and applied at least in the following circumstances
- if joe tries to explicitly checkout dir1
- if joe tries to do a reserved edit on any file in dir1 (checked out as
specified below)
(producing the following error message in wincvs "cvs server: User joe
is unable to read from dir1 ")
However, if joe checks out the parent directory dir0, dir1 and all
it's contents (except subdirectories) are checked out. (though not
editable) ... and only when the checkout tries to get into sub
directories of dir1 does it complain "cvs server: User joe is unable to
read from dir1"
I do not have an opportunity to test this behavior using the pserver
protocol... has anybody else experienced this?
regards,
-AM, Ben Eleventh Admin
On 03.03.2005 03:56, Bo Berglund wrote:
>First of all:
>:local: means that you are totally *bypassing* the CVSNT server and you use
>your local workstation cvs.exe to dig down into the repository files to
>get the data.
>In all likelyhood the permissions that the *server* would have used to
>validate the cvs operation will be totally overlooked in this scenario.
>
>:local: should not even be possible in a properly set up cvs server
>because on such a server there should be *no way* that the users can
>access the repository files via the network in any other way than through
>the cvs service on the server.
>If you are able to use :local: then you have defined a SAMBA share on the
>repository and this is an *unsupported* and stongly discouraged setup.
>
>/Bo
>
>-----Original Message-----
>From: cvsnt-bounces at cvsnt.org [mailto:cvsnt-bounces at cvsnt.org]On Behalf
>Of Ben Eleventh Admin
>Sent: den 3 mars 2005 07:39
>To: cvsnt at cvsnt.org cvsnt downloads at march-hare.com @CVSNT on Twitter CVSNT on Facebook
>Subject: [cvsnt] ACL not working properly
>
>
>I have now tested a lot with both the latest version as well as the last
>"stable" version of cvsnt
>I am connecting to my repository either via :local: or :ssh:
>My repository is sitting on a linux box.
>
>The results are always the same.
>
>If a user is set (via chacl) not to have read access to directory
>dir0/dir1/
>When the user checks-out dir0 he still gets dir1 with all it's files,
>just non of dir1's subdirectories.
>
>Very strange behavior.
>
>Any body else seen this, or have any suggestions?
>_______________________________________________
>_______________________________________________
>cvsnt mailing list
>cvsnt at cvsnt.org cvsnt downloads at march-hare.com @CVSNT on Twitter CVSNT on Facebook
>http://www.cvsnt.org/cgi-bin/mailman/listinfo/cvsnt https://www.march-hare.com/cvspro/en.asp#downcvs
>
>