# HG changeset patch # User Paul Crowley # Date 1255599331 -3600 # Node ID 04e74d4b3822687df038c7c96966957bfcef4b3c # Parent bc2b93fa662d40479df83767a589ea46edf84ac8 Simplify Pat story diff -r bc2b93fa662d -r 04e74d4b3822 doc/manual.docbook --- a/doc/manual.docbook Thu Oct 15 10:31:49 2009 +0100 +++ b/doc/manual.docbook Thu Oct 15 10:35:31 2009 +0100 @@ -149,13 +149,14 @@ Using access.conf mercurial-server offers much more fine-grained access control than this division into two classes of users. Let's suppose you wish to give Pat access to the widget repository, but no other. We first copy Pat's SSH public key into the keys/widget/pat directory in hgadmin. Now mercurial-server knows about Pat's key, but will give Pat no access to anything because the key is not under either keys/pat directory in hgadmin. This tells mercurial-server about Pat's key, but gives Pat no access to anything because the key is not under either keys/root or keys/users. To grant this key access, we must give mercurial-server a new access rule, so we create a file in hgadmin called access.conf, with the following contents: -write repo=widget user=widget/** +# Give Pat access to the "widget" repository +write repo=widget user=pat -Pat will have read and write access as soon as we add, commit, and push these files. +Pat will have read and write access to the widget repository as soon as we add, commit, and push these files. Each line of access.conf has the following syntax: