How can I hide SCM component from a part of my team?

In the 1.0 release, a user with read access to the repository has read
access to all objects in the repository. To prevent visibility, a
separate repository must be created. This is an important issue that
needs to be addressed in the 2.0 release.

Please add your specific requirements to workitem 34067 or workitem 59100.

Cheers,
Geoff

vojakine wrote:

I was wondering how that can be achieved?

Scenario:

We have a distributed Team of developers and a QA Team. QA Team some
times employs offsite contractors who are not supposed to see our
source code.

Possible solution:

I was thinking about letting contractors ( or whole QA Team to that
matter ) access through Web UI with filtered out SCM component (see
advanced server settings). That works, except noone prevents a
contractor from downloading RTC client and use tweaked Web UI URL to
connect to our RTC server. I was wondering how Jazz Team addressed
this issue.

Thank you

Andrei

Hi Geoff

thank you for the reply but that doesn't answer my question.

Let me try to use an example.

For instance on this very site you can go to

https://jazz.net/jazz/web/projects/Jazz%20Project#action=com.ibm.team.workitem.viewWelcome

and explore various parts of the team infrastructure including Bug Tracking system you are referring to, however you can not see scm component. Are you saying that Jazz team keeps separate repositories for Bug tracking, planning and source code? I don't think so. Also connecting to https://jazz.net/jazz from RTC client with your Jazz.net credentials is not possible. The question is how to achieve the same configuration? So third party folks, like contractors, would been able to access the Project area only via web UI.

Thank you

Andrei

Ah, yes, I did misunderstand your question.

We use one repository for all the Rational Team Concert development
resources (bug tracking, code, etc). The URL used by the Eclipse client
is different from that used by the web client, so we can control what
users are allowed to access the repository via the Eclipse client.

I assume that is something a customer can do with their server.

Could someone from the web or repository team comment on the correctness
of that assumption?

Cheers,
Geoff


vojakine wrote:

Hi Geoff

thank you for the reply but that doesn't answer my question.

Let me try to use an example.

For instance on this very site you can go to

https://jazz.net/jazz/web/projects/Jazz%20Project#action=com.ibm.team.workitem.viewWelcome

and explore various parts of the team infrastructure including Bug
Tracking system you are referring to, however you can not see scm
component. Are you saying that Jazz team keeps separate repositories
for Bug trucking, planning and source code? I don't think so. Also
connecting to https://jazz.net/jazz from RTC client with your
Jazz.net credentials is not possible. The question is how to achieve
the same configuration? So third party folks, like contractors, would
been able to access the Project area only via web UI.

Thank you

Andrei

The filtering we've added to jazz.net to hide the Source Control tab is entirely configured in the Apache level. You can configure your web.xml file to restrict certain URL classes and turn-off the scm.web/plugin.xml file to avoid having the source control tab shown.

This isn't documented yet in a tech note, but the repository team promised to explain the details soon.

Jean-Michel
Jazz Source Control Team