Show More
@@ -23,41 +23,50 b' Nor is it safe if remote users share an ' | |||||
23 | is no way to distinguish them. |
|
23 | is no way to distinguish them. | |
24 |
|
24 | |||
25 | The order in which access checks are performed is: |
|
25 | The order in which access checks are performed is: | |
26 | 1) Deny list for branches (section [acl.deny.branches]) |
|
26 | ||
27 |
|
|
27 | 1) Deny list for branches (section ``acl.deny.branches``) | |
28 | 3) Deny list for paths (section [acl.deny]) |
|
28 | 2) Allow list for branches (section ``acl.allow.branches``) | |
29 |
|
|
29 | 3) Deny list for paths (section ``acl.deny``) | |
|
30 | 4) Allow list for paths (section ``acl.allow``) | |||
30 |
|
31 | |||
31 | The allow and deny sections take key-value pairs. |
|
32 | The allow and deny sections take key-value pairs. | |
32 |
|
33 | |||
33 |
|
|
34 | Branch-based Access Control | |
|
35 | --------------------------- | |||
34 |
|
36 | |||
35 |
Use the |
|
37 | Use the ``acl.deny.branches`` and ``acl.allow.branches`` sections to have | |
36 | branch-based access control. |
|
38 | branch-based access control. | |
37 |
|
39 | |||
38 | Keys in these sections can be either: |
|
40 | Keys in these sections can be either: | |
|
41 | ||||
39 | 1) a branch name |
|
42 | 1) a branch name | |
40 | 2) an asterisk, to match any branch; |
|
43 | 2) an asterisk, to match any branch; | |
41 |
|
44 | |||
42 | The corresponding values can be either: |
|
45 | The corresponding values can be either: | |
|
46 | ||||
43 | 1) a comma-separated list containing users and groups. |
|
47 | 1) a comma-separated list containing users and groups. | |
44 | 2) an asterisk, to match anyone; |
|
48 | 2) an asterisk, to match anyone; | |
45 |
|
49 | |||
46 |
|
|
50 | Path-based Access Control | |
|
51 | ------------------------- | |||
47 |
|
52 | |||
48 |
Use the |
|
53 | Use the ``acl.deny`` and ``acl.allow`` sections to have path-based access control. | |
49 | Keys in these sections accept a subtree pattern (with a glob syntax by default). |
|
54 | Keys in these sections accept a subtree pattern (with a glob syntax by default). | |
50 | The corresponding values follow the same syntax as the other sections above. |
|
55 | The corresponding values follow the same syntax as the other sections above. | |
51 |
|
56 | |||
52 |
|
|
57 | Groups | |
|
58 | ------ | |||
53 |
|
59 | |||
54 | Group names must be prefixed with an @ symbol. |
|
60 | Group names must be prefixed with an ``@`` symbol. | |
55 | Specifying a group name has the same effect as specifying all the users in |
|
61 | Specifying a group name has the same effect as specifying all the users in | |
56 | that group. |
|
62 | that group. | |
57 | The set of users for a group is taken from "grp.getgrnam" |
|
63 | The set of users for a group is taken from "grp.getgrnam" | |
58 | (see http://docs.python.org/library/grp.html#grp.getgrnam). |
|
64 | (see http://docs.python.org/library/grp.html#grp.getgrnam). | |
59 |
|
65 | |||
60 |
|
|
66 | Example Configuration | |
|
67 | --------------------- | |||
|
68 | ||||
|
69 | :: | |||
61 |
|
70 | |||
62 | [hooks] |
|
71 | [hooks] | |
63 |
|
72 |
General Comments 0
You need to be logged in to leave comments.
Login now