Has anybody given any thought to upload/download access controls to restrict access to particular people. I think I can draw a parallel between download and the current VIEW access control and the upload operation and the CHANGE access controls.

Upload operation restrictions seem pretty easy since there is already a CGI in the process. Downloads would probably require quite a bit more work.

I am thinking about using twiki pages for downloadable public keys. While prior versions of the key could be retreived from rcs, it would be nice to not have anybody be able to upload it in the first place.

-- JohnRouillard - 18 Aug 2002