Rev 4824: (robertc) Be more clear in the help for bzr serve about the in file:///home/pqm/archives/thelove/bzr/%2Btrunk/

[Canonical.com Patch Queue Manager]

At file:///home/pqm/archives/thelove/bzr/%2Btrunk/

------------------------------------------------------------
revno: 4824 [merge]
revision-id: pqm at pqm.ubuntu.com-20091125001411-8on8cok7aonp4phz
parent: pqm at pqm.ubuntu.com-20091124082841-3ccmfi53fo36ft2k
parent: robertc at robertcollins.net-20091124081517-rwgmbbstcpltudvj
committer: Canonical.com Patch Queue Manager <pqm at pqm.ubuntu.com>
branch nick: +trunk
timestamp: Wed 2009-11-25 00:14:11 +0000
message:
  (robertc) Be more clear in the help for bzr serve about the
  	--allow-writes option. (Robert Collins)
modified:
  NEWS                           NEWS-20050323055033-4e00b5db738777ff
  bzrlib/builtins.py             builtins.py-20050830033751-fc01482b9ca23183
=== modified file 'NEWS'
--- a/NEWS	2009-11-24 02:23:01 +0000
+++ b/NEWS	2009-11-24 08:15:17 +0000
@@ -37,6 +37,9 @@
 
 * ``bzr mv --quiet`` really is quiet now.  (Gordon Tyler, #271790)
 
+* ``bzr serve`` is more clear about the risk of supplying --allow-writes.
+  (Robert Collins, #84659)
+
 * Lots of bugfixes for the test suite on Windows. We should once again
   have a test suite with no failures on Windows. (John Arbash Meinel)
 

=== modified file 'bzrlib/builtins.py'
--- a/bzrlib/builtins.py	2009-11-23 00:57:38 +0000
+++ b/bzrlib/builtins.py	2009-11-24 08:15:17 +0000
@@ -4757,8 +4757,8 @@
     takes_options = [
         Option('inet',
                help='Serve on stdin/out for use from inetd or sshd.'),
-        RegistryOption('protocol', 
-               help="Protocol to serve.", 
+        RegistryOption('protocol',
+               help="Protocol to serve.",
                lazy_registry=('bzrlib.transport', 'transport_server_registry'),
                value_switches=True),
         Option('port',
@@ -4773,7 +4773,11 @@
         Option('allow-writes',
                help='By default the server is a readonly server.  Supplying '
                     '--allow-writes enables write access to the contents of '
-                    'the served directory and below.'
+                    'the served directory and below.  Note that ``bzr serve`` '
+                    'does not perform authentication, so unless some form of '
+                    'external authentication is arranged supplying this '
+                    'option leads to global uncontrolled write access to your '
+                    'file system.'
                 ),
         ]