[Monotone-devel] Proposition: hooks to set permissions on branch names

[Richard Levitte - VMS Whacker]

Hi guys,

there are times when one might want to assign extra permissions to
some people for some branches rather than others.  Right now, it seems
like such possibilities are missing (I was looking at the hook
get_manifest_cert_trust, but found it had a very different purpose),
so I'm proposing the following hooks:

get_read_permitted (branchname, identity)
get_write_permitted (branchname, identity)
get_anonymous_read_permitted (branchname)

They would work just like the get_netsync_*_permitted hooks, but be
called anytime a read or write operation is to be performed, based on
the branch cert found with the object that was just fetched or the
object that is about to be written.

To tell the truth, I see no reason why the get_netsync_*_permitted
hooks would stick around if the above is added, as they would become
some kind of lesser duplicates...  And considering Graydon's thoughts
about removing the concept of collections altogether, this might be a
good idea either way.

I haven't looked at that part of the code yet, so I've no clue how
hard this would be to implement.  I also have no clue how this would
affect performance.

If there is a way to do what I'm looking for with currently available
hooks, I'd very much like to be informed (clued in, really :-)).

Cheers,
Richard

-----
Please consider sponsoring my work on free software.
See http://www.free.lp.se/sponsoring.html for details.

-- 
Richard Levitte                         address@hidden
                                        http://richard.levitte.org/