Hijacking someone else's app with git.

[jdunphy]

When deleting/editing apps, username is checked, but I don't see anything in the ssh config that prevents anybody from performing clone/push to ANY repo, which are just named after app names. Just thought I'd mention it, since I didn't see a mention of this in the TODO list.

[chrismatthieu]

I thought about that to and that's why we decided to name the repos with with the long hash ids from CouchDB as a temporary stop-gap. We are also looking into adding support for Gitosis to privatize the repos.

Feel free to contribute if you're interested in helping!

Thanks,
Chris

[jdunphy]

I've been messing around with a similar project, and I'm using gitolite to handle all of the ssh/git stuff. I found that it was a little easier to parse/write the gitolite config file over gitosis.