Take the tour ×  I've set up Mercurial via Apache
(hgwebdir.cgi). I would like to have the same functionality as
when using Subversion and AuthzSVNAccessFile, in which I can
restrict which user has read or write permissions for every
single repository. The acl extension only controls how changes
are brought to the repository, as does the allow_push directive.
Any thoughts?  share|improve this question add comment  2
Answers  up vote 5 down vote accepted  There is an allow_read
directive that can be added to a repository hgrc that works the
same way as allow_push. If specified, and the user accessing the
hgwebdir CGI script is not in the list, the project doesn't even
show up at the index page.  share|improve this answer Thanks a
lot! The allow_read directive does not appear in the hgbook, nor
in the wiki at selenic.com when it describes hgrc. –  mgv Jun 30
'09 at 15:08 add comment  They're served up via apache or
lighttpd, right? So you could maybe hide them behind normal
webby ACL things? (basic auth, etc)