diff -r f0745da75056 -r ce9e231265c1 mercurial/localrepo.py
--- a/mercurial/localrepo.py	Thu Jun 18 15:34:22 2015 -0500
+++ b/mercurial/localrepo.py	Thu Jun 18 15:39:52 2015 -0500
@@ -798,7 +798,9 @@
         return self
 
     def publishing(self):
-        return self.ui.configbool('phases', 'publish', True)
+        # it's safe (and desirable) to trust the publish flag unconditionally
+        # so that we don't finalize changes shared between users via ssh or nfs
+        return self.ui.configbool('phases', 'publish', True, untrusted=True)
 
     def cancopy(self):
         # so statichttprepo's override of local() works