Tagged Questions

1
vote
2answers
416 views

How to configure mercurial access controls using apache and hgweb?

I have set up a mercurial repo to be served using apache+wsgi+hgweb on OS X. It is now completely open to anyone who stumbles upon my server on the correct port number.. How can I set it up so that ...
2
votes
2answers
123 views

Are there any known security vulnerabilities to the built-in mercurial server?

I'm considering whether to use the built-in hg serve or to bother with configuring it with apache etc. The mercurial server will be potentially running on either Debian or OS X 10.5 My main ...
9
votes
7answers
355 views

Where to maintain central source repository?

What is the industry best practice regarding securing access to source code? I am thinking SSL only connections via apache allowed over to our server on an obscure port that doesn't conflict with ...
2
votes
2answers
720 views

Read access control with Mercurial and Apache

I've set up Mercurial via Apache (hgwebdir.cgi). I would like to have the same functionality as when using Subversion and AuthzSVNAccessFile, in which I can restrict which user has read or write ...
3
votes
3answers
457 views

Implementing anonymous pull but verified-user push via HTTPS

Basically, how do I do it? Currently I've configured the Location in Apache to require SSL, use basic auth, and require valid-user. That's a bit much, as I want to allow anonymous pull, just require ...
4
votes
3answers
3k views

Hosting multiple repositories, each with differing access control

We will need to host a series of Mercurial repositories. For security, we will use SSL encryption in Apache and htpasswd access (required). I tested out a single repository and used hgwebdir.cgi and ...