[cvsacl-users] Doubt about recursive mode and acls

[Federico E. <fed...@cl...>]

Hi, I'm testing the cvsacl patch. First, I'm installed
cvs-1.11.10-cvsacl-1.1.3-patched version on a PIII with Debian GNU/Linux
3.0r1 kernel 2.4.23.

Now, I need a good way to verify user permissions. I will have got
different web-application projects. For example:

/webroot/project1
/webroot/project2
/webroot/project3

I will have got many users that's should be has got different acl. For
example, "usera" -read- access to "project1".
"userb" -read/write- access to "project1" and -read- access to
"project2".
"userc" -read/write- access to "project1" and "project3".

I'm seeing the patch should be works.

But, I'm having the following trouble:
When the user is configured, he should be "free moving" into the
"module-project". But, it isn't possible when he add/create a new
directory/file. Because nobody can access if I don't run the following
line:
# cvs -d /webroot racl userX:cdwr -R -d projectY

Does exist anyway to set the cvsacl options (like above) but the
recursive mode will be permanent?


This is my configurations options:
# New repository (root)
mkdir /webroot
cvs import -d /webroot
chown -R cvsadm:nogroup /webroot
chmod 2770 /webroot

# New module (root)
cd /to/some/path
cvs import -m "Begin project" project1 usera start
chown -R cvsadm:nogroup /repository

# Set user permissions for module (root)
cvs -d /repository racl usera:cdrw -R -d project1
chown -R cvsadm:nogroup /repository

My aclconfig:
--- snip snip ---
UseCVSACL=3Dyes
CVSACLDefaultPermissions=3Dn
UseSystemGroups=3Dno
UseCVSGroups=3Dyes
CVSServerRunAsUser=3Dcvsadm
--- snip snip ---


Thanks you very much.
Fede