[Fwd: Artifact publishing system ( was Re: md5's)]

[Nicola Ken Barozzi <ni...@apache.org>]

No response, thus nudging again 8-)

-------- Original Message --------
Subject: Artifact publishing system ( was Re: md5's)
Date: Wed, 06 Oct 2004 01:39:29 +0200
From: Nicola Ken Barozzi <ni...@apache.org>
Reply-To: repository@apache.org
To: repository@apache.org
CC: 'Noel J. Bergman' <no...@devtech.com>,  Sander Striker 
<st...@apache.org>
References: <Pi...@castor.cs.uu.nl> 
<41...@apache.org>


Mark R. Diggory wrote:
...
> But this still doesn't solve the fact that at the project level members 
> of separate projects can still manipulate the contents of other projects 
> within that unix group.
> 
> Maybe back when the unix groups were established the the number of 
> projects under a groups wasn't an issue, now however, this isn't 
> scalable, with so many projects in jakarta, there's little control 
> across the project permissions, in terms of distributions.

I share this concern, even more now that withh SVN Unix shell accounts
will not be handed out to new committers.

What we need is upload via WebDAV with access control and notification,
not necessarily with SVN.

Noel, Sander, where do we go from here?

> Noel J. Bergman wrote:
>
>> I just had an interesting chat with Sander about adding features to
>> our WebDAV support. He seems to think that it would be fairly easy to
>> add hook and authz support, so that authorizing access to a file
>> system area would be the same as we use for SVN.
>> Also, we'd have hooks that could perform actions when changes are
>> made.

-- 
Nicola Ken Barozzi                   nicolaken@apache.org
             - verba volant, scripta manent -
    (discussions get forgotten, just code remains)
---------------------------------------------------------------------