Stephen Lau wrote:

>>> Which one, letting people set their questions, or the suggested 
>>> questions in the list?
>>>     
>> Letting people set their questions.  If they screw up, its their 
>> security risk....
>>   
> Until someone compromises their account and deletes/edits pages, SCM 
> repos, adds unauthorised committers to repositories, and approves rogue 
> RTIs (yeah yeah, I'm thinking a little bit ahead).  Then it's a security 
> risk that's compromised the whole system.

All you need to be able to do is inject a SSH key into the account of 
someone who has commit rights to the repository you want to target.

-- 
Alan Burlison
--
_______________________________________________
website-discuss mailing list
[email protected]

Reply via email to