Re: [fossil-users] impersonating users

On 11/3/15, Eduard wrote: > Hi, > > It seems that anyone with checkin privileges can push anything to a > fossil server, including artifacts that claim to come from other users. > I understand why this is (I'm not complaining); I just want to know > whether there's

Re: [fossil-users] impersonating users

On 11/03/2015 06:38 AM, Richard Hipp wrote: > On 11/3/15, Eduard wrote: > > The artifact receipt log (/rcvfromlist) shows *all* artifacts that > have been received. But it does not filter by artifact type or user - > it shows everything. > > The list-of-artifacts

Re: [fossil-users] impersonating users

On 2 November 2015 at 22:02, Andy Bradford wrote: > 1) Browse to your server (e.g. http://localhost:8080/ in your example), > login and click on a checkin. You will see something like: > > Received From: tester @ 127.0.0.1 on 2015-11-03 05:56:22 Follow up question

Re: [fossil-users] impersonating users

Thus said jungle Boogie on Mon, 02 Nov 2015 22:17:50 -0800: > http://www.fossil-scm.org/index.html/info/653b6b92404c53f3 > Do I not see the received from because I am not logged into the repo? Correct. Also, I might add, that even if you do have a login, only having the right privileges

Re: [fossil-users] impersonating users

Thus said Eduard on Tue, 03 Nov 2015 00:20:08 -0500: > I understand why this is (I'm not complaining); I just want to know > whether there's some command/page for listing recently received > control artifacts whose user does not match the user pushing them, so > they can be further