The Security/ACL Subtab

Opening a Security/ACL Subtab

Security/ACL Subtab Layout

How Individual Commands Use the ACL

Conflicting Permissions

Working in a Security/Access-Control Subtab

The ACL subtab of the Security tab displays the repository's set of access control list (ACL) entries, also called permissions. Each stream and depot in the repository can have any number of permissions. [note For this command, "stream" can be a dynamic stream A stream whose configuration changes over time, with new versions promoted from child workspaces and/or from other dynamic streams. It also inherits versions from its parent stream., a workspace stream The private stream that is built into a workspace. All new versions of elements are originally created in workspaces; AccuRev records these versions in workspace streams., or a snapshot A immutable ('frozen', 'static') stream that captures the configuration of another stream at a particular time. A snapshot cannot be renamed or modified in any way..] Each permission controls the ability of a particular user, or a particular set of users, to access that stream or depot.

See also:

AccuRev Security Overview

Opening a Security/ACL Subtab

Choose Admin > Security from the GUI main menu to display the Security tab. Then, click the ACL subtab.

Security/ACL Subtab Layout

The table in the ACL subtab includes these columns:

Type

The type of resource to which the permission applies: Stream or Depot.

Resource

The name of the stream or depot to which the permission applies. The permission also applies to (is inherited by) the entire subhierarchy below that resource, but it can be overridden at a lower level. [note Because permissions are inherited down a depot's stream hierarchy The tree-structured collection of streams — including snapshots and workspace streams — for a particular depot., a permission on a depot is almost equivalent to one on the depot's base stream ('root stream') The top-level stream in a depot’s stream hierarchy.. The only difference is that a depot permission also affects access to the depot's issue database A set of issue records, each of which implements a bug report, feature description, etc. Each depot can have its own issues database. Each issues database has its own schema..]

Applies To

The user or set of users to which the permission applies: all users with passwords (identified as "authuser" in the AccuRev CLI), all users without passwords ("anyuser" in the CLI), a particular user, or a particular group.

Rights

all: the user(s) can access the resource.

none: the user(s) cannot access the resource.

Inheritable

Depot permission:

yes: the permission applies to the depot's AccuWork issue database, and also to the depot's entire stream hierarchy.

no: the permission applies only to the depot's AccuWork issue database, not to any of the depot's version-controlled elements.

Stream permission:

yes: the permission applies to the entire subhierarchy below the stream in the Resource column.

no: the permission applies only to the stream in the Resource column, not to any lower-level stream.

How Individual Commands Use the ACL

The following commands check ACL entries on one or more dynamic streams A stream whose configuration changes over time, with new versions promoted from child workspaces and/or from other dynamic streams. It also inherits versions from its parent stream., workspace streams The private stream that is built into a workspace. All new versions of elements are originally created in workspaces; AccuRev records these versions in workspace streams., or snapshots An immutable (frozen, static) stream that captures the configuration of another stream at a particular time. A snapshot cannot be renamed or modified in any way. before proceeding. In the following, 'stream' can be a dynamic stream, workspace stream, or snapshot. If a version is being accessed from stream A, and that version is cross-link An include/exclude mode operation ('Include from Stream') that includes an element in a workspace or stream, specifying an alternative backing stream for that element. Cross-linking a directory also cross-links the entire subtree below it. Cross-linked elements have (xlinked) status.'ed to stream B, AccuRev checks the ACL permissions on stream A only, not on stream B.

Conflicting Permissions

Two or more permissions on a resource can apply to the same user, or to the same stream. In such cases, an all permission overrides one or more none permissions. This makes it easy to implement "all but" access controls.

Working in a Security/Access-Control Subtab

Use the following commands to maintain the set of permissions in the repository's access control list.

Add ACL Entry

Change ACL Entry

The same dialog enables you to create a new ACL permission, or to modify an existing one.

Resource: Select one of the repository's depots from the Depot listbox.

Security Group: Use the radio buttons (and listboxes) to specify an individual user or a single group to which the permission will apply. (You can't specify multiple users or groups, but you can produce the same effect by creating multiple permissions on the same resource.)

Permission: Select all or none from the listbox.

Remove ACL Entry

Deletes the selected entry(s) from the access control list.