hgext/acl.py
changeset 11131 0b6fd18ab8af
parent 11115 b3d5619f1f2b
child 11138 99eee847beaa
equal deleted inserted replaced
11130:e81966e88e80 11131:0b6fd18ab8af
    78   # Use this if you want to check access restrictions for pull, push,
    78   # Use this if you want to check access restrictions for pull, push,
    79   # bundle and serve.
    79   # bundle and serve.
    80   pretxnchangegroup.acl = python:hgext.acl.hook
    80   pretxnchangegroup.acl = python:hgext.acl.hook
    81 
    81 
    82   [acl]
    82   [acl]
    83   # Check whether the source of incoming changes is in this list where
    83   # Allow or deny access for incoming changes only if their source is
    84   # "serve" == ssh or http, and "push", "pull" and "bundle" are the
    84   # listed here, let them pass otherwise. Source is "serve" for all
    85   # corresponding hg commands.
    85   # remote access (http or ssh), "push", "pull" or "bundle" when the
       
    86   # related commands are run locally.
       
    87   # Default: serve
    86   sources = serve
    88   sources = serve
    87 
    89 
    88   [acl.deny.branches] 
    90   [acl.deny.branches] 
    89   
    91   
    90   # Everyone is denied to the frozen branch: 
    92   # Everyone is denied to the frozen branch: 
   124   # Nobody will be able to change "DONT-TOUCH-THIS.txt", despite
   126   # Nobody will be able to change "DONT-TOUCH-THIS.txt", despite
   125   # everyone being able to change all other files. See below.
   127   # everyone being able to change all other files. See below.
   126   src/main/resources/DONT-TOUCH-THIS.txt = *
   128   src/main/resources/DONT-TOUCH-THIS.txt = *
   127 
   129 
   128   [acl.allow]
   130   [acl.allow]
   129   # if acl.allow not present, all users allowed by default
   131   # if acl.allow is not present, all users are allowed by default
   130   # empty acl.allow = no users allowed
   132   # empty acl.allow = no users allowed
   131 
   133 
   132   # User "doc_writer" has write access to any file under the "docs"
   134   # User "doc_writer" has write access to any file under the "docs"
   133   # folder:
   135   # folder:
   134   docs/** = doc_writer
   136   docs/** = doc_writer