##// END OF EJS Templates
use repo[changeid] to get a changectx
use repo[changeid] to get a changectx

File last commit:

r6747:f6c00b17 default
r6747:f6c00b17 default
Show More
acl.py
124 lines | 4.4 KiB | text/x-python | PythonLexer
Vadim Gelfer
add acl extension, to limit who can push to subdirs of central repo.
r2344 # acl.py - changeset access control for mercurial
#
# Copyright 2006 Vadim Gelfer <vadim.gelfer@gmail.com>
#
# This software may be used and distributed according to the terms
# of the GNU General Public License, incorporated herein by reference.
#
# this hook allows to allow or deny access to parts of a repo when
# taking incoming changesets.
#
# authorization is against local user name on system where hook is
# run, not committer of original changeset (since that is easy to
# spoof).
#
# acl hook is best to use if you use hgsh to set up restricted shells
# for authenticated users to only push to / pull from. not safe if
# user has interactive shell access, because they can disable hook.
# also not safe if remote users share one local account, because then
# no way to tell remote users apart.
#
# to use, configure acl extension in hgrc like this:
#
# [extensions]
# hgext.acl =
#
# [hooks]
# pretxnchangegroup.acl = python:hgext.acl.hook
#
# [acl]
# sources = serve # check if source of incoming changes in this list
# # ("serve" == ssh or http, "push", "pull", "bundle")
#
# allow and deny lists have subtree pattern (default syntax is glob)
# on left, user names on right. deny list checked before allow list.
#
# [acl.allow]
# # if acl.allow not present, all users allowed by default
# # empty acl.allow = no users allowed
# docs/** = doc_writer
# .hgtags = release_engineer
#
# [acl.deny]
# # if acl.deny not present, no users denied by default
# # empty acl.deny = all users allowed
# glob pattern = user4, user5
# ** = user6
Matt Mackall
Simplify i18n imports
r3891 from mercurial.i18n import _
Joel Rosdahl
Expand import * to allow Pyflakes to find problems
r6211 from mercurial.node import bin, short
Matt Mackall
Replace demandload with new demandimport
r3877 from mercurial import util
import getpass
Vadim Gelfer
add acl extension, to limit who can push to subdirs of central repo.
r2344
class checker(object):
'''acl checker.'''
def buildmatch(self, key):
'''return tuple of (match function, list enabled).'''
Bryan O'Sullivan
ui: Rename has_config to has_section.
r4487 if not self.ui.has_section(key):
Vadim Gelfer
add acl extension, to limit who can push to subdirs of central repo.
r2344 self.ui.debug(_('acl: %s not enabled\n') % key)
return None, False
thisuser = self.getuser()
Mikhail Sobolev
really treat the right side of acl.{allow,deny} as a list of users...
r3062 pats = [pat for pat, users in self.ui.configitems(key)
if thisuser in users.replace(',', ' ').split()]
Vadim Gelfer
add acl extension, to limit who can push to subdirs of central repo.
r2344 self.ui.debug(_('acl: %s enabled, %d entries for user %s\n') %
(key, len(pats), thisuser))
if pats:
match = util.matcher(self.repo.root, names=pats)[1]
else:
match = util.never
return match, True
def getuser(self):
'''return name of authenticated user.'''
return self.user
def __init__(self, ui, repo):
self.ui = ui
self.repo = repo
self.user = getpass.getuser()
cfg = self.ui.config('acl', 'config')
if cfg:
Alexis S. L. Carvalho
use ui.readsections in the acl extension
r3436 self.ui.readsections(cfg, 'acl.allow', 'acl.deny')
Vadim Gelfer
add acl extension, to limit who can push to subdirs of central repo.
r2344 self.allow, self.allowable = self.buildmatch('acl.allow')
self.deny, self.deniable = self.buildmatch('acl.deny')
def skipsource(self, source):
'''true if incoming changes from this source should be skipped.'''
ok_sources = self.ui.config('acl', 'sources', 'serve').split()
return source not in ok_sources
def check(self, node):
'''return if access allowed, raise exception if not.'''
Matt Mackall
use repo[changeid] to get a changectx
r6747 files = self.repo[node].files()
Vadim Gelfer
add acl extension, to limit who can push to subdirs of central repo.
r2344 if self.deniable:
for f in files:
if self.deny(f):
self.ui.debug(_('acl: user %s denied on %s\n') %
(self.getuser(), f))
raise util.Abort(_('acl: access denied for changeset %s') %
short(node))
if self.allowable:
for f in files:
if not self.allow(f):
self.ui.debug(_('acl: user %s not allowed on %s\n') %
(self.getuser(), f))
raise util.Abort(_('acl: access denied for changeset %s') %
short(node))
self.ui.debug(_('acl: allowing changeset %s\n') % short(node))
def hook(ui, repo, hooktype, node=None, source=None, **kwargs):
if hooktype != 'pretxnchangegroup':
raise util.Abort(_('config error - hook type "%s" cannot stop '
'incoming changesets') % hooktype)
c = checker(ui, repo)
if c.skipsource(source):
ui.debug(_('acl: changes have source "%s" - skipping\n') % source)
return
start = repo.changelog.rev(bin(node))
end = repo.changelog.count()
for rev in xrange(start, end):
c.check(repo.changelog.node(rev))