The push|pull vs update distinction
John Arbash Meinel
john at arbash-meinel.com
Tue Jan 15 18:20:38 GMT 2008
Mattias Eriksson wrote:
>
> tis 2008-01-15 klockan 08:41 -0600 skrev John Arbash Meinel:
>> Right, LP works that way (it uses a custom SSH implementation that
>> doesn't even *have* a shell). And there is contrib/bzr_access which
>> allows you to restrict connections to only allow "bzr serve" to be run.
>
> but does bzr_access actually work? As far as I could tell when I tested
> it, it tried to get the directory information from the --directory
> option in the SSH_ORIGINAL_CMD environment variable. But that option
> will always be --directory=/
>
> //Mattias
It works in as much as you can control access through that user. It just
doesn't allow you to specific multiple repositories with different
access controls from the same user.
So it isn't a 100% solution for everything that you would want to do
with access control. But it *does* provide one part of the solution.
John
=:->
More information about the bazaar
mailing list