From: Jeff King <peff@peff.net>
Date: Thu, 29 Jan 2009 23:23:58 GMT
Subject: Re: Security and permissions in git
Message-ID: <20090129232358.GA12941@coredump.intra.peff.net>
In-Reply-To: <alpine.LNX.1.00.0901291645300.19665@iabervon.org>

On Thu, Jan 29, 2009 at 05:13:41PM -0500, Daniel Barkalow wrote:

> Every commit contains a version of the complete contents, so people have 
> to be able to read the contents of all directories and write some 
> directory contents. However, you can prohibit users from pushing content 
> to the repository unless particular directories (or files) match what's 
> there already. This is generally what people want when they have this 
> requirement.

If this is what you want, see Shawn's contrib/hooks/update-paranoid,
which lets you specify ACLs in the config.

-Peff