How to identify the users?
- From
- Scott Yan <scottyan19@gmail.com>
- Date
- Jan 31, 2013, 05:52 UTC
- Message-ID
- <CACkbei+Jby13B7rsEb3iLQM2ZSFDgrkgvrYC5M7u4yatppvLxA@mail.gmail.com>
Hello everyone:
The user info of git client (user name and email) is set by the users themselves, so , how to avoid userA pretend to be userB?
Git server could authentication the user, but it do nothing about the user info of commit message.
For example: There are 20 people of my team, and everyone can push to the public repository(git server), If I found some backdoor code in my project, and the commit record shows it was committed by userA, so I ask userA: why do you do this? but he told me: no, this is not my code, I have never committed such thing. ----and yes, everyone could change his user info to userA very easily .
so... what should I do to avoid such situations? Thanks!