Help - Search - Members - Calendar
Full Version: Window user authentication
Quma Software - QVCS Product Family Forums > QVCS Products > QVCS-Enterprise
ROHIT
Hello,
Everything is fine in this -- I checked that. But I have two queries which is the requirement of my company for which we are looking Version Control System

1)Each user typically stores copies of the files on their local drive, or in an area that is their private sandbox. Is there need to take dump of all project related source code, any documentation files in client machines seperately (means local files)-- If yes, then situation arise


Let it suppose that each user have taken a dump of all project related source code files. Now user A checkedout one .jsp file and at the same time if another user will go to make updation in same using QVCS interface then system will prompt you message "That file has been locked by A user". But here User B can overwrite this file by going in its workflow directory on unchecking the Read-Only option for that file. How we can restrict that functional behavior which seriously impeding the security of server files.


2) Can't we directly make and save changes in the server files by mapping that server project files path on Client machine. We want full security in accessing the files for add/edit.
Jim Voris
1) Hmmm. How does changing the read-only protection on a local workfile affect the security of a file stored on the server? I don't think I understand the question/issue.

2) If you want to prevent the user from having direct access to files stored on the server you'll need to use file system security and/or server security to prevent that. For example, there is no need for a user to have any kind of authorization to access the files on the server, since the QVCS-Enterprise server application handles all access to the archive files.

Note that authentication (logging in) to the QVCS-Enterprise server is completely separate from Windows authentication. There is no need for a user to have Windows access to the server machine -- the user merely needs TCP access to the server machine.
ROHIT
1) Jim, I understand that server file will never get effected , this appl. will display either "Different" and/or "Merge Required" status value to the user who did teh changes directly thru accessing that drive.

tell us please differnece in these two status.

What I did: I checkedout one file and performed some changes and from another client machine made up few changes by disabling "Red-Onl" attribute. Now from first machine , I am going to checkin that file and in auto way status get changed to "Different" and to "Merge Required" on another client machine

2) In second case - Yes we can prevent the user from having direct access to files stored on the server you'll need to use file system security and/or server security. But if users are not having permission n server files then they can't run any .java file cause for compilation they need corresponding CLASS files

Company requirement is to perform checkedout and checkedin operation directly accessing the server files ( not keeping source code files on local machines). and should worked for users according to the given permission.

e.g. If user A is having read/write access on .jsp files then he should not be allowed to make changes in any other files. I know that we can do it from QVCS also by allowing only .jsp files to that user. He should not be allowed to make any changes in .java and class files.

Jim Voris
See this page for an explanation of the meaning of 'Different' and 'Merge Required'.

For (2)... QVCS-Enterprise can limit the operations that a user is allowed to perform, but it does not (and will not in 2.1) limit what a user can do to a file based on the file's file type. So, for example, QVCS-Enterprise can prohibit a user with only READER rights from making any changes to the archive files of a project, but it does not allow a user to checkin changes to .jsp files, but prohibit changes to .java files (for example).

If you need that level of access control, please let me know, and I'll add it to the wish list. (Note that QVCS and QVCS-Pro do offer that level of access control).
ROHIT
Hello Jim ,
That would be better if you do the needful.

Thanks,
Rohit
ROHIT
Hello Jim,
Everything is fine in this tool; but our company is looking for version control system with window authentication. As such functional behavior can we get in this tool.

Thanks,
Rohit
Jim Voris
Hmmm. If your remote users connect to the server campus via a VPN, then the VPN typically uses some kind of Windows authentication to establish the VPN connection.

If your client users are already behind your firewall, then it's typical for users to login to their Workstations using Windows authentication.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2010 Invision Power Services, Inc.