From: Sergey Vlasov <vsu@altlinux.ru>
Date: Tue, 27 Sep 2005 09:59:03 GMT
Subject: Re: shared GIT repos
Message-ID: <20050927135903.6b20a76b.vsu@altlinux.ru>
In-Reply-To: <20050927084513.GU31276@kiste.smurf.noris.de>

On Tue, 27 Sep 2005 10:45:13 +0200 Matthias Urlichs wrote:

> > If one has commit privileges, then one can already do enough
> > harm to the project without being able to remove objects nor
> > updating a ref with non-fast-forward ref.
> 
> But in that case it's traceable what happened and whodunit.

Don't forget that the user who has rights to invoke git-receive-pack
can set the "author" and "committer" fields in his commits to anything
he wants - unless you check these fields in hooks/update.