2

I am using hgwebdir.cgi on a windows machine running IIS7. I have succesfully set up the system to display all the Repos I've configured in my collections section; howerver, I would like to have granularity per repo as to which web users/mercurial users can view/push/pull from the repos. I thought that the ACL Extension might be able to do this but based on the documentation I found I wasn't confident it was the correct path. I'm looking for any documentation on accomplishing the following: Person 1 can view/push/pull from Repos A/B/C but person 2 can only view/push/pull from A/B NOT C.

flag

1 Answer

2

The Mercurial Redbook goes into a fair amount of discussion on how to set up hg serve ACLs. That mostly works independently of the ACL extension, I believe.

If you're using Kiln, the good news is you don't need to figure any of that out. Kiln provides very easy-to-manage access control. You can set permissions for a given user to any of none, read-only (they can clone, but not push), read/write (they can clone and push), and admin (they can clone and push, and alter permissions on the repository). Permissions can be set for both projects and repositories, with repositories, by default, inheriting the permissions of their enclosing project.

To set permissions in Kiln, go to the project or repository's Settings tab.

Kiln's free for students and startups, and comes with a 45-day demo no matter how big you are. You should give it a shot.

link|flag
Does Kiln use the ACL extension to accomplish all the sweetness you describe above? I'm on a crusade to figure out this security stuff in vanilla Hg, but in the long run I may want to move to Kiln as it certainly provides a very structured work flow for development/quality review. – JPrescottSanders Feb 25 2010 at 20:00
1 
Nope. The security in Kiln was implemented by us which unfortunately means that you will have to rely on other documentation for more details. Sorry! – Jason Rosoff Feb 25 2010 at 20:14
No problem, I figured you'd baked it up, but thought I should at least ask. There has to be someone out there that's dug in deep with the ACL hooks, IIS7 and Mercurial... I'm just hoping they use SO or KILN Exchange. – JPrescottSanders Feb 25 2010 at 20:20

Your Answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.