From: Johannes Schindelin <johannes.schindelin@gmx.de>
Date: Thu, 07 Dec 2006 15:42:43 GMT
Subject: Re: Locked down (but still shared) repositories
Message-ID: <Pine.LNX.4.63.0612071640160.28348@wbgn013.biozentrum.uni-wuerzburg.de>
In-Reply-To: <20061207113539.GA10781@spearce.org>

Hi,

On Thu, 7 Dec 2006, Shawn Pearce wrote:

> For various auditing reasons the repositories need to be tightly
> controlled.  That is the following cannot be permitted:
> 
>   * delete or overwrite a loose object;
>   * delete or overwrite a pack file;
>   * delete or overwrite a ref, except see below;
>   * change the config;
>   * change the description;
>   * change HEAD;
> 
> [...]
>
> I also cannot create secondary git-only UNIX accounts for each user,
> using git-shell in the git-only account.

How about just one such user? After all, you already have this user: the 
repo owner. Of course, people have to push via ssh, even on the same 
machine.

Ciao,
Dscho