ACL's based on a CVS group name( was Re: [cvsnt] no chacl responses?)

Mike Wake mike.wake at thales-tts.com
Tue May 10 09:28:03 BST 2005


Community technical support mailing list was retired 2010 and replaced with a professional technical support team. For assistance please contact: Pre-sales Technical support via email to sales@march-hare.com.


Yeah,

I would be interested in this too.

I have never got groups working with acls and sspi in 2.0.58d on linux.
I ended up working around it by adding people to the "writers" file, 
using chacl on a case by case basis, setting up email notification to 
the relevant people and generally holding a big stick.

I tend to have a repository for each department so the people with write 
access usually only get themselves into trouble.

Unfortunately, I haven't got around to setting up my linux box to run 
two cvsnt servers.  My plan is to keep 2.0.58d in production while I 
test out the newer versions.  My other plan is to setup a new linux box 
for this purpose, but I know that as soon as I do that will find its way 
into production too. ;)

I tried setting this up ages ago but ran into the problem of the newer 
server expecting a newer version of the cvslock protocol. Since then 
Tony has confirmed it is theoretically possible to achieve what I want 
to do, and one of these days I am going get around to trying it again.

Especially when the new database stuff comes online. That will be very 
cool and I'm already dreaming up stuff to do with it.

Cheers
Mikew

dzielke at aep.com wrote:
> 
> Mike,
> 
> It works!  Woohoo!  Thanks for your help!!!  :-)
> 
> Do you set any ACL's based on a CVS group name?  When I replicate the 
> order and permissions that you set on a user level, it works perfectly. 
>  However, when I try to use a CVS group, it doesn't work.  Can anyone 
> verify the proper file name and setup for the CVSROOT file called "group"?
> 
> I did have to do a few minor edits of the fileattr.xml file, though. 
>  First being to fix the malformed owner attribute when I run the cvs 
> chown command, and then whenever I run a cvs chacl command it puts some 
> kind of binary character in front of my user name "<eff>".  Those were 
> detailed in my emails from last week, let me know if you want me to 
> re-post those.
> 
> Thanks,
> Don Zielke
> American Electric Power
> Direct (614) 583-6337
> Audinet 8-220-6337
> Email dzielke (at) aep.com
> ---
> KForce Professional Staffing
> 501 W. Schrock Road Suite 207
> Westerville, OH 43081
> 
> 
> 	*Mike Wake <mike.wake at thales-tts.com>*
> 
> 05/09/2005 10:36 AM
> 
> 	       
>         To:        dzielke at aep.com
>         cc:        cvsnt at cvsnt.org cvsnt downloads at march-hare.com @CVSNT on Twitter CVSNT on Facebook
>         Subject:        Re: [cvsnt] no chacl responses?
> 
> 
> 
> 
> Here is one of mine.
> 
> This is the acl on my CVSROOT folder.
> 
> I created by doing something like the following
> 
> cvs chown mwake
> cvs chacl -u mwake -a read,write,create,tag,control
> cvs chacl -u jblogs -a read,write
> cvs chacl -a noread,nowrite,nocreate,notag,nocontrol
> cvs lsacl
> 
> <?xml version="1.0" encoding="UTF-8"?>
> <fileattr>
>   <directory>
>     <acl user="jblogs">
>       <read />
>       <write />
>     </acl>
>     <acl user="mwake">
>       <control />
>       <create />
>       <read />
>       <tag />
>       <write />
>     </acl>
>     <acl>
>       <control deny="1" />
>       <create deny="1" />
>       <read deny="1" />
>       <tag deny="1" />
>       <write deny="1" />
>     </acl>
>     <owner>mwake</owner>
>   </directory>
> </fileattr>
> 
> I run v2.0.58d on linux with some minor patches to solve specific
> problems that I found and reported on ages(many many months) ago.
> 
> Cheers
> Mikew
> 
> 
> dzielke at aep.com wrote:
>  > Yes, I noticed that too.  I had all my emails set in the past week in my
>  > inbox this morning. :-/  My apologies for my impatience...
>  >
>  > I *really* need to see an example of a working fileattr.xml ACL... if
>  > anyone can help me please let me know!
>  >
>  > Thanks,
>  > Don Zielke
>  > American Electric Power
>  > Direct (614) 583-6337
>  > Audinet 8-220-6337
>  > Email dzielke (at) aep.com
>  > ---
>  > KForce Professional Staffing
>  > 501 W. Schrock Road Suite 207
>  > Westerville, OH 43081
>  >
>  >
>  >
>  >
>  > "Bo Berglund" <Bo.Berglund at system3r.se>
>  > 05/09/2005 10:04 AM
>  >
>  >  
>  >         To:     <dzielke at aep.com>, <cvsnt at cvsnt.org cvsnt downloads at march-hare.com @CVSNT on Twitter CVSNT on Facebook>
>  >         cc:
>  >         Subject:        RE: [cvsnt] no chacl responses?
>  >
>  >
>  > In actual fact the cvsnt newsserver seems to have been down for some 
> time,
>  > there has not been anything coming my way until an hour or so ago when
>  > there
>  > suddenly appeared about 30-40 messages.
>  >
>  > Concerning chacl AFAICT there is nothing wrong with it and it is being
>  > used
>  > in many places. Only I myself don't use it since we are a small shop and
>  > we
>  > don't need detailed permission setting.
>  >
>  > /Bo
>  >
>  > -----Original Message-----
>  > From: cvsnt-bounces at cvsnt.org [mailto:cvsnt-bounces at cvsnt.org]On Behalf
>  > Of dzielke at aep.com
>  > Sent: den 6 maj 2005 15:01
>  > To: cvsnt at cvsnt.org cvsnt downloads at march-hare.com @CVSNT on Twitter CVSNT on Facebook
>  > Subject: [cvsnt] no chacl responses?
>  >
>  >
>  > Tony/Bo/Glen -
>  >
>  > A few days ago I asked some questions about the chacl command and 
> received
>  >
>  > no replies at all... I would take that to mean that no one here has any
>  > experience with it and I should probably look elsewhere.  No problem, I
>  > can deal with that.
>  >
>  > Question though - does that imply that the chacl functionality is broken
>  > and needs to be fixed, or just that no one uses it?  I guess what I'm
>  > getting around to asking is... would it be worth it to get the 
> March-Hare
>  > support?  I hate to spend the money for getting just this one feature
>  > working...  but I'm not a developer (I'm a CM guy) so it would take me
>  > forever to weed through source code to figure this out.  Google didn't
>  > produce anything helpful, and I've already printed out everything on the
>  > topic from the archives.
>  >
>  > Are there any other sources of information I can try before I tell my
>  > manager to bust out the wallet?
>  >
>  > Thanks,
>  > Don Zielke
>  > American Electric Power
>  > Direct (614) 583-6337
>  > Audinet 8-220-6337
>  > Email dzielke (at) aep.com
>  > ---
>  > KForce Professional Staffing
>  > 501 W. Schrock Road Suite 207
>  > Westerville, OH 43081
>  > _______________________________________________
>  > cvsnt mailing list
>  > cvsnt at cvsnt.org cvsnt downloads at march-hare.com @CVSNT on Twitter CVSNT on Facebook
>  > http://www.cvsnt.org/cgi-bin/mailman/listinfo/cvsnt https://www.march-hare.com/cvspro/en.asp#downcvs
>  >
>  >
>  > _______________________________________________
>  > cvsnt mailing list
>  > cvsnt at cvsnt.org cvsnt downloads at march-hare.com @CVSNT on Twitter CVSNT on Facebook
>  > http://www.cvsnt.org/cgi-bin/mailman/listinfo/cvsnt https://www.march-hare.com/cvspro/en.asp#downcvs
> 
> 



More information about the cvsnt mailing list
Download the latest CVSNT, TortosieCVS, WinCVS etc. for Windows 8 etc.
@CVSNT on Twitter   CVSNT on Facebook