comparison doc/hgrc.5.txt @ 11286:ccfd1cbc7289

hgrc: improve docs for the trusted section
author Matt Mackall <mpm@selenic.com>
date Fri, 04 Jun 2010 20:13:51 -0500
parents 5f01fd602542
children 713ae78bb583
comparison
equal deleted inserted replaced
11285:f118029e534c 11286:ccfd1cbc7289
779 checking that all new file revisions specified in manifests are 779 checking that all new file revisions specified in manifests are
780 present. Default is False. 780 present. Default is False.
781 781
782 ``trusted`` 782 ``trusted``
783 """"""""""" 783 """""""""""
784 For security reasons, Mercurial will not use the settings in the 784
785 Mercurial will not use the settings in the
785 ``.hg/hgrc`` file from a repository if it doesn't belong to a trusted 786 ``.hg/hgrc`` file from a repository if it doesn't belong to a trusted
786 user or to a trusted group. The main exception is the web interface, 787 user or to a trusted group, as various hgrc features allow arbitrary
787 which automatically uses some safe settings, since it's common to 788 commands to be run. This issue is often encountered when configuring
788 serve repositories from different users. 789 hooks or extensions for shared repositories or servers. However,
790 the web interface will use some safe settings from the ``[web]``
791 section.
789 792
790 This section specifies what users and groups are trusted. The 793 This section specifies what users and groups are trusted. The
791 current user is always trusted. To trust everybody, list a user or a 794 current user is always trusted. To trust everybody, list a user or a
792 group with name ``*``. 795 group with name ``*``. These settings must be placed in an
796 *already-trusted file* to take effect, such as ``$HOME/.hgrc`` of the
797 user or service running Mercurial.
793 798
794 ``users`` 799 ``users``
795 Comma-separated list of trusted users. 800 Comma-separated list of trusted users.
796 ``groups`` 801 ``groups``
797 Comma-separated list of trusted groups. 802 Comma-separated list of trusted groups.