How do you limit access to a Depot or Stream via ACLs?

0 Likes

How to limit access to a Depot or Stream via AccuRev's User Groups and ACLs?
QUESTION:
How to limit access to a Depot or Stream via AccuRev's User Groups and ACLs?

ANSWER:
Here are the steps for setting up limited access to a depot named ACME and for a stream named "Gizmo_QA":

1. Create a group that will have full access to the ACME depot. We'll assume the group is called GroupA.
<accurev mkgroup GroupA>

Create a group that will have full accss to the Gizmo_QA stream. We'll assume the group is called QA.
<accurev mkgroup QA>

2. Add the appropriate users to the groups.
<accurev addmember joe_user GroupA>
<accurev addmember joe_user QA>

3. Create the ACL (access control list) that will have full access.
<accurev setacl depot ACME GroupA all>
The above ACL grants full access to all the users in the GroupA group for the ACME depot.

<accurev setacl stream Gizmo_QA QA all>
The above ACL grants full access to all the users in the QA group for the Gizmo_QA stream.

4. You will need to setup two more ACLs for the ACME depot:
<accurev setacl depot ACME anyuser none> (users without a password)
<accurev setacl depot ACME authuser none> (users with a password, but not defined in GroupA)

You will need to setup two more ACLs for the Gizmo_QA stream:
<accurev setacl stream Gizmo_QA anyuser none> (users without a password)
<accurev setacl stream Gizmo_QA authuser none> (users with a password, but not defined in the QA group)

5. Verify that all the ACLs have been set:
<accurev lsacl depot>
Project Group rights
ACME anyuser none
ACME authuser none
ACME GroupA all
Now only the GroupA users can access the depot.

<accurev lsacl depot>
Project Group rights
Gizmo_QA anyuser none
Gizmo_QA authuser none
Gizmo_QA QA all
Now only the QA group users can access the Gizmo_QA stream.


NOTE: The users in both GroupA and QA need to have passwords enabled for them to be authenticated. Otherwise they will be viewed as "anyuser".


For more information contact AccuRev Support

Comment List
Anonymous
Related Discussions
Recommended