narrow_widen_acl: enforce narrowacl in narrow_widen (SEC) Reviewer note: this was sent by the author as a simple bugfix, but can be considered a security patch, since it allows users to access things outside of the ACL, hence the (SEC) prefix. However, this affects the `narrow` extention which is still marked as experimental and has relatively few users aside from large companies with their own security layers on top from what we can gather. We feel (Alphare: or at least, I feel) like pinging the packaging list is enough in this case.

     1

#require execbit

     2

     3

  $ hg init repo

     4

  $ cd repo

     5

  $ echo foo > foo

     6

  $ chmod 644 foo

     7

  $ hg ci -qAm '644'

     8

     9

  $ chmod 755 foo

    10

  $ hg ci -qAm '755'

    11

    12

reverting to rev 0

    13

    14

  $ hg revert -a -r 0

    15

  reverting foo

    16

  $ hg st

    17

  M foo

    18

  $ hg diff --git

    19

  diff --git a/foo b/foo

    20

  old mode 100755

    21

  new mode 100644

    22

    23

  $ cd ..