From: Johannes Schindelin <johannes.schindelin@gmx.de>
Date: Tue, 23 Jan 2007 09:41:21 GMT
Subject: Re: Repository Security
Message-ID: <Pine.LNX.4.63.0701231036400.22628@wbgn013.biozentrum.uni-wuerzburg.de>
In-Reply-To: <200701221433.13257.andre@masella.no-ip.org>

Hi,

On Mon, 22 Jan 2007, Andre Masella wrote:

> I've been using git for a while and really like it, but I have a concern 
> about security.
> 
> As I understand it, none of the repository backends allow any per-user 
> per-branch access control.

The idea in git (unless you really want to get the same setup as in CVS, 
which would be rather sad) is that every developer has at least one 
repository. Write-access: only one developer.

Now, to integrate you _pull_. No need for write-access for anybody else.

Of course, this means that all developers should have read-access to all 
repositories.

I already hear the complaint: "But you need a central repository!". If you 
_have_ to have a central repository, designate the integrator's repository 
central.

Ciao,
Dscho