On Dec 6, 2007 11:52 AM, Reuben Avery <reuben@swirl.net> wrote:
> Is there an example script you know of on how to do this? My unix skills
> are rather neophyte (but I'm not an idiot and with a little guidance can
> figure things out ;)
I believe Andy is just saying that you separate the roles of the developer
and the person who does the packaging and releases ("release engineer"). The
permission on the folder that contains the password file is set such that
only the release engineer can access. So, basically there is no script; just
separating the roles and setting permissions appropriately.
And the release engineer will be the one you can share your password with.
If there is no one you can share your password with then either you will
become the release engineer, or you will have to write some script to
encrypt the decrypt the password (this perl module may help?
http://aspn.activestate.com/ASPN/CodeDoc/Data-Encrypted/Encrypted.html)
Thanks,
>
>
> On 12/6/07 11:49 AM, "Andy Levy" <andy.levy@gmail.com> wrote:
>
> > On Dec 6, 2007 2:45 PM, Reuben Avery < reuben@swirl.net> wrote:
> >> But doesn't the script have the same permissions as the user running
> it?
> >
> > Run your automated build process under its own account, with its own
> > Subversion credentials?
> >
> >> On 12/6/07 11:41 AM, "Andy Levy" <andy.levy@gmail.com> wrote:
> >>
> >>> On Dec 6, 2007 2:38 PM, Reuben Avery < reuben@swirl.net> wrote:
> >>>> That won't work because the whole point is to keep the FTP access
> creds
> >>>> hidden from developers.
> >>>
> >>> Put the credentials in a separate file, in a subdirectory which the
> >>> developers don't have read access to, and have the script read them
> >>> from that file.
> >>>
> >>> If you need to keep the credentials in the repository at all.
> >>>
> >>>> On 12/6/07 11:25 AM, "Sohail Somani" <sohail@taggedtype.net> wrote:
> >>>>
> >>>>> On Thu, 06 Dec 2007 11:19:04 -0800, Reuben Avery wrote:
> >>>>>
> >>>>>> I have seen svnant and the ANT ftp tasks... this seems "ok" to
> start
> >>>>>> with.. I don't like the idea of having to store a plaint-text FTP
> >>>>>> password within the makefile, though..
> >>>>>
> >>>>> I don't use Ant, but afaik it lets you set build properties. So one
> of
> >>>>> these properties might be ftp.password and you can reference it
> using
> >>>>> ${ftp.password}.
> >>>>>
> >>>>> Nothing to do with SVN though, I'm afraid :-)
> >>>>
>
Received on Thu Dec 6 21:10:38 2007