Fossil SCM

Rewrote explanation of "o" cap.

wyoung 2019-08-27 01:55 caps-doc
Commit 208ca0d713d93212e33d29805e55ad3e8555f05b53f42301c3d9bc558a9d0fa9
1 file changed +17 -8
--- www/capabilities.md
+++ www/capabilities.md
@@ -413,18 +413,26 @@
413413
* <a name="m"></a>**m (ApndWiki)** — Append content to existing wiki articles.
414414
Mmnemonics: a**m**end or **m**odify.
415415
416416
* <a name="n"></a>**n (NewTkt)** — File new tickets. Mnemonic: **n**ew ticket.
417417
418
-* <a name="o"></a>**o (Read)** — Check data out from Fossil. This capability
419
- has nothing to do with the ability to “open” a local repo clone or
420
- switch branches in that clone. It only controls whether similar
421
- operations over HTTP to a remote repo are allowed. You must have
422
- this capability to view [embedded documentation][edoc], for example,
423
- since that basically amounts to opening a file in the remote repo.
424
- This capability also controls the [`/artifact`][au], [`/file`][fu],
425
- and [`/raw`][ru] URLs. Mnemonic: check **o**ut file.
418
+* <a name="o"></a>**o (Read)** — Read repository content from a remote
419
+ Fossil instance over HTTP. This capability has nothing to do with
420
+ reading data from a local repository, because [caps affect Fossil’s
421
+ web interfaces only](#fssync). Once you’ve cloned a remote
422
+ repository to your local machine, you can do any reading you want on
423
+ that repository irrespective of whether your user has **o**
424
+ capability; the repo clone is completely under your user’s power at
425
+ that point, affectted only by OS file permissions and such. (To
426
+ prevent cloning, see [**g**](#g).)
427
+
428
+ It is common to withhold this capability from low-status visitors to
429
+ prevent them from viewing [embedded documentation][edoc], seeing
430
+ [the file browser][du], and pulling file content via the
431
+ [`/artifact`][au], [`/file`][fu], and [`/raw`][ru] URLs.
432
+
433
+ Mnemonic: check **o**ut remote repo contents.
426434
427435
* <a name="p"></a>**p (Password)** — Change one’s own password. Mnemonic:
428436
**p**assword.
429437
430438
* <a name="q"></a>**q (ModTkt)** — Moderate tickets: comments appended to
@@ -516,10 +524,11 @@
516524
**d**ebug.
517525
518526
519527
[ale]: ./alerts.md
520528
[au]: /help?cmd=/artifact
529
+[du]: /help?cmd=/dir
521530
[edoc]: ./embeddeddoc.wiki
522531
[fmod]: ./forum.wiki#moderation
523532
[for]: ./forum.wiki
524533
[fu]: /help?cmd=/file
525534
[gdpr]: https://en.wikipedia.org/wiki/General_Data_Protection_Regulation
526535
--- www/capabilities.md
+++ www/capabilities.md
@@ -413,18 +413,26 @@
413 * <a name="m"></a>**m (ApndWiki)** — Append content to existing wiki articles.
414 Mmnemonics: a**m**end or **m**odify.
415
416 * <a name="n"></a>**n (NewTkt)** — File new tickets. Mnemonic: **n**ew ticket.
417
418 * <a name="o"></a>**o (Read)** — Check data out from Fossil. This capability
419 has nothing to do with the ability to “open” a local repo clone or
420 switch branches in that clone. It only controls whether similar
421 operations over HTTP to a remote repo are allowed. You must have
422 this capability to view [embedded documentation][edoc], for example,
423 since that basically amounts to opening a file in the remote repo.
424 This capability also controls the [`/artifact`][au], [`/file`][fu],
425 and [`/raw`][ru] URLs. Mnemonic: check **o**ut file.
 
 
 
 
 
 
 
 
426
427 * <a name="p"></a>**p (Password)** — Change one’s own password. Mnemonic:
428 **p**assword.
429
430 * <a name="q"></a>**q (ModTkt)** — Moderate tickets: comments appended to
@@ -516,10 +524,11 @@
516 **d**ebug.
517
518
519 [ale]: ./alerts.md
520 [au]: /help?cmd=/artifact
 
521 [edoc]: ./embeddeddoc.wiki
522 [fmod]: ./forum.wiki#moderation
523 [for]: ./forum.wiki
524 [fu]: /help?cmd=/file
525 [gdpr]: https://en.wikipedia.org/wiki/General_Data_Protection_Regulation
526
--- www/capabilities.md
+++ www/capabilities.md
@@ -413,18 +413,26 @@
413 * <a name="m"></a>**m (ApndWiki)** — Append content to existing wiki articles.
414 Mmnemonics: a**m**end or **m**odify.
415
416 * <a name="n"></a>**n (NewTkt)** — File new tickets. Mnemonic: **n**ew ticket.
417
418 * <a name="o"></a>**o (Read)** — Read repository content from a remote
419 Fossil instance over HTTP. This capability has nothing to do with
420 reading data from a local repository, because [caps affect Fossil’s
421 web interfaces only](#fssync). Once you’ve cloned a remote
422 repository to your local machine, you can do any reading you want on
423 that repository irrespective of whether your user has **o**
424 capability; the repo clone is completely under your user’s power at
425 that point, affectted only by OS file permissions and such. (To
426 prevent cloning, see [**g**](#g).)
427
428 It is common to withhold this capability from low-status visitors to
429 prevent them from viewing [embedded documentation][edoc], seeing
430 [the file browser][du], and pulling file content via the
431 [`/artifact`][au], [`/file`][fu], and [`/raw`][ru] URLs.
432
433 Mnemonic: check **o**ut remote repo contents.
434
435 * <a name="p"></a>**p (Password)** — Change one’s own password. Mnemonic:
436 **p**assword.
437
438 * <a name="q"></a>**q (ModTkt)** — Moderate tickets: comments appended to
@@ -516,10 +524,11 @@
524 **d**ebug.
525
526
527 [ale]: ./alerts.md
528 [au]: /help?cmd=/artifact
529 [du]: /help?cmd=/dir
530 [edoc]: ./embeddeddoc.wiki
531 [fmod]: ./forum.wiki#moderation
532 [for]: ./forum.wiki
533 [fu]: /help?cmd=/file
534 [gdpr]: https://en.wikipedia.org/wiki/General_Data_Protection_Regulation
535

Keyboard Shortcuts

Open search /
Next entry (timeline) j
Previous entry (timeline) k
Open focused entry Enter
Show this help ?
Toggle theme Top nav button