Re: Repository Security

From: Johannes Schindelin <johannes.schindelin@gmx.de>
Date: Jan 23, 2007, 09:41 UTC
Message-ID: <Pine.LNX.4.63.0701231036400.22628@wbgn013.biozentrum.uni-wuerzburg.de>
In-Reply-To: <200701221433.13257.andre@masella.no-ip.org>

Hi,

On Mon, 22 Jan 2007, Andre Masella wrote:

Show 5 quoted lines

> I've been using git for a while and really like it, but I have a concern 
> about security.
> 
> As I understand it, none of the repository backends allow any per-user 
> per-branch access control.

The idea in git (unless you really want to get the same setup as in CVS, which would be rather sad) is that every developer has at least one repository. Write-access: only one developer.

Now, to integrate you _pull_. No need for write-access for anybody else.

Of course, this means that all developers should have read-access to all repositories.

I already hear the complaint: "But you need a central repository!". If you _have_ to have a central repository, designate the integrator's repository central.

Ciao, Dscho