[p4] Protecting changelists

[Paul Goffin]

No you don't.

You need to run another server for those other projects.  This wont cost you
anything.

(And if you're really bothered about security, put that second server on a
segmented network and run it behind a VPN.)

Paul.

-----Original Message-----
From: perforce-user-bounces at perforce.com
[mailto:perforce-user-bounces at perforce.com] On Behalf Of Finn Normann
Pedersen
Sent: 01 February 2007 14:11
Cc: perforce-user at perforce.com
Subject: Re: [p4] Protecting changelists


Thanks for the answer, I kinda expected that.

Too bad. We will have to run some projects with higher security in CVS 
or Subversion.

Regards, Finn




Robert Cowham wrote:
> This is a weakness of the Perforce security model - the answer is no. 
> (Well you can always see the changelist descriptions, though no files 
> will be listed if protect doesn't let you see them).
>
> (Argument I have heard is that there is a tradeoff between performance 
> and security, and this is where they currently draw the line).
>
> If you don't like it, make sure Perforce support has your request for 
> change logged!
>
> Some sites will run an extra Perforce server for highly secure code, 
> partly for this reason.
>
> Robert
>
>   
>> -----Original Message-----
>> From: perforce-user-bounces at perforce.com
>> [mailto:perforce-user-bounces at perforce.com] On Behalf Of Finn 
>> Normann Pedersen
>> Sent: 01 February 2007 08:07
>> To: perforce-user at perforce.com
>> Subject: [p4] Protecting changelists
>>
>> Hi,
>>
>> Is there any way that I can restrict that users can see all
>> and describe any changelist?
>>
>> 'p4 changes' dumps all changelists
>>
>> 'p4 describe' describes any changelist even if it is changes
>> on files I do not have access to.
>>
>> Best regards,
>>   Finn
>>     
>
>
>   
_______________________________________________
perforce-user mailing list  -  perforce-user at perforce.com
http://maillist.perforce.com/mailman/listinfo/perforce-user