Comments on: Transifex and SSH keys http://dimitris.glezos.com/weblog/2007/07/26/transifex-ssh-keys A greek/geek weblog Mon, 01 Feb 2010 14:23:25 +0000 hourly 1 http://wordpress.org/?v=3.1.3 By: Δημήτρης Γλέζος http://dimitris.glezos.com/weblog/2007/07/26/transifex-ssh-keys/comment-page-1#comment-6505 Δημήτρης Γλέζος Thu, 26 Jul 2007 18:47:20 +0000 http://dimitris.glezos.com/weblog/2007/07/26/transifex-ssh-keys/#comment-6505 <p>Right, besides imposing ACLs on the VCS side, module maintainers have the choice to do so on the transifex side with a regex. This way, only the relevant files (eg. <code>po/*.po</code>, <code>po/Changelog</code>, <code>po/LINGUAS</code>) are presented to the translator.</p> <p>Of course, as you already mentioned, this is orthogonal to the SSH keys: it works just in the web system. But it certainly controls a lot what one can and cannot do in the standard procedures of the web system.</p> Right, besides imposing ACLs on the VCS side, module maintainers have the choice to do so on the transifex side with a regex. This way, only the relevant files (eg. po/*.po, po/Changelog, po/LINGUAS) are presented to the translator.

Of course, as you already mentioned, this is orthogonal to the SSH keys: it works just in the web system. But it certainly controls a lot what one can and cannot do in the standard procedures of the web system.

]]> By: Colin Walters http://dimitris.glezos.com/weblog/2007/07/26/transifex-ssh-keys/comment-page-1#comment-6473 Colin Walters Thu, 26 Jul 2007 02:47:32 +0000 http://dimitris.glezos.com/weblog/2007/07/26/transifex-ssh-keys/#comment-6473 <p>Not sure if this was mentioned (or implemented) before but - somewhat orthogonal to your concerns about SSH keys, I would try to ensure that the system limits what can be committed; e.g. only changes to po/*.po.</p> <p>If you implement this as a separate process (the one with access to the ssh keys), it seems reasonably safe.</p> Not sure if this was mentioned (or implemented) before but – somewhat orthogonal to your concerns about SSH keys, I would try to ensure that the system limits what can be committed; e.g. only changes to po/*.po.

If you implement this as a separate process (the one with access to the ssh keys), it seems reasonably safe.

]]>