[cvsnt] Relation between Windows System users and CVS users

[Gaurav Chhabra]

 Hi All,



We are using CVSNT 2.5.03 for version control & developers access the
repository using Net Beans IDE 6.1. They have no access to CVS via command
line. Everything (server as well as client machines) is on Windows XP Pro
(SP2).

I have created users in *passwd* file present in CVSROOT directory. Things
are working fine but I don't have clarity about how a windows system user is
related to a CVS user. In *Local Users and Groups -> Users*, I can only see
an Administrator user as an active one. Rest all accounts are disabled.
Since the developers don't have access to command line, I didn't get a
chance to execute any command from their system but I *think* if they had
the access, they could have succeeded in executing any command they wanted.

I have gone through few links where it was mentioned that you need to have
at least one system user created in order to create CVS users. I think in my
case, the Administrator user (in my case) is serving the purpose (as all
other users are disabled).

*My Queries*:
------------------------------------------
1. Does the above scenario imply that if developers had access to command
line, they could have succeeded in passing any damn command from the command
line?

2. If yes, is there any way through which I can tell CVS to differentiate
between an 'admin' user and a 'normal' user? (I have read that there is an
admin file which one can create in CVSROOT directory)

Also, what is the default value of *SystemAuth* variable present in *config
*file? I can see that by default it's commented. Official CVSNT doc
discusses about its values but nothing about its default value.

3. How is a Windows system user related/important to CVS?

4. When I open the CVSNT control panel and go to *Server Settings -> Run as
user*, I can see two options (besides others) namely, '(client user)' &
'Machine_no\Administrator'.

How are these two options different from each other? I have noticed that
when I have to add user names (by creating *passwd* file in CVSROOT
directory) to any repository, I have to switch to '(client user)' option. I
am totally confused. :(
------------------------------------------

One reason for asking these queries was obviously to clear my concept and
the other reason was to restrict all users but administrator from accessing
the repository when need be. I have searched a lot on Internet and also
looked into official guide but could not find any satisfactory explanation
to clear my doubts, hence this post.
Any help will be highly appreciated.



Thanks & Regards,
Gaurav Chhabra