/etc/mercurial-server and hgadmin

diff -r 04e74d4b3822 -r b29a7088b132 doc/manual.docbook --- a/doc/manual.docbook Thu Oct 15 10:35:31 2009 +0100 +++ b/doc/manual.docbook Thu Oct 15 10:38:13 2009 +0100 @@ -181,19 +181,6 @@ -When considering a request, mercurial-server steps through all the rules in /etc/mercurial-server/access.conf and then all the rules in access.conf in hgadmin looking for a rule which matches on every condition. If it does not find such a rule, it denies the request; otherwise it checks whether the rule grants sufficient privilege to allow it. - - -By default, /etc/mercurial-server/access.conf has the following rules: - -init user=root/** -deny repo=hgadmin -write user=users/** - - -These rules ensure that root users can do any operation on any repository, that no other users can access the hgadmin repository, and that those with keys in keys/users can read or write to any repository but not create repositories. - - A condition is a globpattern matched against a relative path. The two most important conditions are @@ -210,6 +197,19 @@ want. More precisely, "*" matches zero or more characters not including "/" while "**" matches zero or more characters including "/". + +When considering a request, mercurial-server steps through all the rules in /etc/mercurial-server/access.conf and then all the rules in access.conf in hgadmin looking for a rule which matches on every condition. If it does not find such a rule, it denies the request; otherwise it checks whether the rule grants sufficient privilege to allow it. + + +By default, /etc/mercurial-server/access.conf has the following rules: + +init user=root/** +deny repo=hgadmin +write user=users/** + + +These rules ensure that root users can do any operation on any repository, that no other users can access the hgadmin repository, and that those with keys in keys/users can read or write to any repository but not create repositories. +