bzr serve and access control?

[Eugene Wee]

Hi,

On Tue, Feb 2, 2010 at 6:32 PM, Josef Wolf <jw at raven.inka.de> wrote:
> 2. Create one account per repository and use authorized_keys to give
>   permission to users. No way to give read-only access this way.
>   In addition, it is not possible to give users possibility to create
>   new repositories on the fly by themselves.
>
> 3. Use bzr_access (or a similar method). Here, every user needs multiple
>   keys (one key for every repository he wants to access).
>   As above, we can't give read-only access to specific users this way.

The documentation for bzr_access gave me the impression that you can
give read-only access to specific users with the appropriate
configuration, though I never actually used this myself. A quick test
confirms the documentation, although the error message is not terribly
user friendly to an unsuspecting user: "Cannot lock LockDir(...):
Transport operation not possible: readonly transport".

Note that you can use bzr_access with the "one account per repository"
method to avoid requiring that each user have a different key for each
repository.

Regards,
Eugene