is [trusted] expected to work from repo-wise hgrc ?

[Benoit Boissinot]

On Wed, Sep 10, 2008 at 9:13 PM, Vladimir Marek <Vladimir.Marek at sun.com> wrote:
>
> But still I am a bit puzzled. So what is happening
> a) I do 'hg pull'
> b) remote hg is spawned
> c) remote hg reads my ~/.hgrc
> d) remote hg tests if its repo .hg/hgrc (thus hgrc remote to me) belongs
>   to trusted user or group
> e) it finds it does not and prints the warning without reading the
>   (remote) repository config
>
> But if I am correct here, setting 'trusted.users = *' in my hgrc I can
> trick remote hg to run arbitrary commands ?

You would have to put that in the remote hgrc, what you put in your local hgrc
doesn't have any effect on the remote hg process.

regards,

Benoit