Re: shared GIT repos
- From
Sergey Vlasov <vsu@altlinux.ru>
- Date
- Sep 27, 2005, 09:59 UTC
- Message-ID
- <20050927135903.6b20a76b.vsu@altlinux.ru>
- In-Reply-To
- <20050927084513.GU31276@kiste.smurf.noris.de>
On Tue, 27 Sep 2005 10:45:13 +0200 Matthias Urlichs wrote:
Show 5 quoted lines
> > If one has commit privileges, then one can already do enough > > harm to the project without being able to remove objects nor > > updating a ref with non-fast-forward ref. > > But in that case it's traceable what happened and whodunit.
Don't forget that the user who has rights to invoke git-receive-pack can set the "author" and "committer" fields in his commits to anything he wants - unless you check these fields in hooks/update.