[p4] Limit View Access in P4Web

[Ivey, William]

> -----Original Message-----
> From: Eric D. Blom [mailto:ebx at cypress.com]
> Sent: Thursday, September 16, 2004 10:03 PM
> To: perforce-user at perforce.com
> Cc: Rick Hood
> Subject: [p4] Limit View Access in P4Web
> 
> 
> We have added some files to perforce that we would prefer not to be 
> generally accessible for viewing. I expected that the following would 
> be sufficient to limit access
> 
>          write user * * -//prjsrc/...
>          read user * * -//prjsrc/...
>          read group prjsrc 172.30.* //prjsrc/...
> 
> This seems to work well for P4Win and P4, but, P4Web sill allows the 
> files to be viewed. I'm running p4web in browser mode with no 
> authentication.

I had some trouble with that too. Here's my protect
table entries that seem to work:

        list user <userid> xxx.xxx.xxx.xx -//...
        read user <userid> xxx.xxx.xxx.xx //dev/java/...
        read user <userid> xxx.xxx.xxx.xx //users/common/...

<userid> is the user that P4Web runs as. (It's a real
user, so the restrictions are applied only on the server
box - whose ip addr is behind all those x's - that
actually runs P4Web; he'd have complained otherwise :-)

Doesn't look that much different than yours, except for
the list access, but the manual says it doesn't matter
what you put there, everything is turned off.

-Wm