diff options
| author | Job van der Voort <job@gitlab.com> | 2014-09-18 07:59:45 +0000 |
|---|---|---|
| committer | Job van der Voort <job@gitlab.com> | 2014-09-18 07:59:45 +0000 |
| commit | cc96496996b5fae9d24fd54c43d50a302342f87a (patch) | |
| tree | db4fde3596709fd68699158e52f3460627f75bb0 | |
| parent | 01c101752da95b4d4d0caf4f36fd9f6aa87a272f (diff) | |
| parent | 664b433afef12b12d93fac078826ad6fc7c492f5 (diff) | |
| download | gitlab-ce-cc96496996b5fae9d24fd54c43d50a302342f87a.tar.gz | |
Merge branch 'security-in-dvcs' into 'master'
Security in dvcs
Explain why access & sharing are the same.
See merge request !1097
| -rw-r--r-- | doc/security/README.md | 1 | ||||
| -rw-r--r-- | doc/security/information_exclusivity.md | 9 |
2 files changed, 10 insertions, 0 deletions
diff --git a/doc/security/README.md b/doc/security/README.md index b89e8cbe020..f88375f2afd 100644 --- a/doc/security/README.md +++ b/doc/security/README.md @@ -2,3 +2,4 @@ - [Password length limits](password_length_limits.md) - [Rack attack](rack_attack.md) +- [Information exclusivity](information_exclusivity.md) diff --git a/doc/security/information_exclusivity.md b/doc/security/information_exclusivity.md new file mode 100644 index 00000000000..127166ae2e7 --- /dev/null +++ b/doc/security/information_exclusivity.md @@ -0,0 +1,9 @@ +# Information exclusivity + +Git is a distributed version control system (DVCS). +This means that everyone that works with the source code has a local copy of the complete repository. +In GitLab every project member that is not a guest (so reporters, developers and masters) can clone the repository to get a local copy. +After obtaining this local copy the user can upload the full repository anywhere, including another project under their control or another server. +The consequense is that you can't build access controls that prevent the intentional sharing of source code by users that have access to the source code. +This is an inherent feature of a DVCS and all git management systems have this limitation. +Obviously you can take steps to prevent unintentional sharing and information destruction, this is why only some people are allowed to invite others and nobody can force push a protected branch. |