Security
Whether in a small in-house IT team, or a large software product development team, the job of an engineering manager is to measure and control the development process. Since the source code for development projects is critical intellectual property, managers need to know what changes are being made and who is making them. Further, projects often require strict controls over which company personnel can view or modify files. Without direct support for these access controls, companies risk both the security of their intellectual property and the stability of their source code.
AccuRev provides standard features to support both access control and security. All accounts in AccuRev can be password enabled, assuring that only known users with known credentials can access the system. Access control lists (ACLs) can be constructed in AccuRev to establish control over repositories, depots and streams, limiting the visibility and permissions of users to access those objects. Further, streams can be locked to restrict how code changes can be applied to a stream. Together with the audit trail established by the AccuRev history feature, these security mechanisms provide strong controls to assure that only desired users are making changes to company-critical source code.
Key features
- Password protection for all system access
- Persistent logging of all SCM operations via AccuRev history mechanism
- Access control lists to protect streams and depots from unauthorized usage
- Stream locks to control flow of source code through stream hierarchy