Access control for shared repository

John Arbash Meinel john at arbash-meinel.com
Fri Dec 7 20:16:09 GMT 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Balint Aradi wrote:
> Dear all,
> 
>   After using bazaar for more then half a year for private projects, I'd
> like to set up shared repositories with some access control. The
> repositories should be accessible through bzr+ssh with a common user
> name. The access control should be based on the ssh-key used for login.
> 
>  I was thinking to write a Python wrapper in the spirit of hg-login [1]
> in order to restrict access to selected repositories. One could specify
> for each repository rw or r flags for users or group of users.
> 
>   Is there eventually already a script like that around? Alternatively,
> is there any community interest in such a script?
> 
>   Best regards,
> 
>     Bálint
> 
> 
> [1] http://www.selenic.com/mercurial/wiki/index.cgi/SharedSSH
> 

I think that would be very helpful to have. I'm not super amazed at the perl
script, but I guess it does what it needs to.

Another item that I didn't see them doing, would be to add a "umask" call
somewhere. Not every group uses it, and if you are all sharing the same local
user on the machine it may not matter as much. But it *is* one of the things
that I wish was a little bit easier to do for sftp etc.

John
=:->

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHWaoJJdeBCYSNAAMRAq5fAKCOpzrLyTaudIsPnh6A3IB4TGwp9gCfZKWN
SYYDNRa1EmyfifoBWA6FXMM=
=EGfp
-----END PGP SIGNATURE-----



More information about the bazaar mailing list