We are getting ready to use an offshore dev team for one of our projects. My concern is security. We havent used this team before and we are simply trying them out on a small test project to fix a few bugs on a particular application. They will need access to kiln and fogbugz.
Right now for this particular application we have the stable, test and dev repositories.
We have a couple of ways to go and wanted to get your opinions:
- Simply assign them to the appropriate repository as a user and they can create a local version of the repository, make the bug fixes and push that code back to the repository. we would then deploy the code on the test server and see if they have fixed the bug(s) correctly.
- Clone the appropriate repository, set them up with appropriate user rights, let them fix the bugs, push that code back to the cloned repository then we can merge with the 'real' version of that repository.
Thanks in advance