Access Control Plus: DevOps collaboration

Access Control Plus streamlines source code security for Subversion and Git repositories. With its intuitive interface, it simplifies managing permissions, allowing you to easily control who can view, edit, or interact with your code.

Centralized control

Manage all your Subversion and Git repositories from a single, intuitive interface.
Streamline access control processes, regardless of repository location.
Gain a comprehensive view of your source code security posture across your entire organization.

Reduced administrative overhead

Seamlessly integrate with LDAP and Active Directory for automated user provisioning.
Eliminate the need for manual user management by automation and reduce the risk of human error.

Boost developer productivity

Protect your source code with detailed access controls down to the file or branch level (platform-dependent).
Ensure only authorized personnel can access sensitive code repositories and branches. (*Visibility of sub-repository items can be blocked in SVN only)

Talk to an expert to learn more

Case studies from global leaders on how Cirata resolved their challenges utilizing Access Control Plus.

Onsemi's SVN modernization with Access Control Plus.

Problem

onsemi needed to migrate their Subversion repositories from the end-of-life CollabNet SVN Edge platform to a modern, supported environment. They faced challenges with security risks, outdated software, complex configuration, and unmaintained access lists.

Solution

Migrating 400+ SVN repositories to a new RHEL environment.
Replacing CollabNet's access control functionality with Access Control Plus, preserving existing access rules.
Integrating Access Control Plus with Onsemi's LDAP infrastructure for automated user and team management.
Upgrading all SVN repositories to the latest version along with underlying components (JAVA, Apache, OS).

Results

Seamless migration and upgrade with minimal disruption to developers.
Transitioned to a supported and secure SVN environment.
Enabled future growth with a scalable access control solution.
Enhanced source code protection and compliance with internal policies
Improved user management and minimized manual errors.

A semiconductor manufacturer was struggling to maintain manual authorization and authentication files.

Problem

A leading semiconductor manufacturer with 2,550 SVN and Git repositories and 1,600 developers faced slow, error-prone processes, inconsistent access controls, poor visibility, and frustrated developers with project delays.

Solution

Centralize access control management with a single, web-based interface.
Integrate with existing LDAP/Active Directory for automated user provisioning and permissions.
Automate the generation and delivery of authentication files.
Enable role-based access control for simplified management.
Provide comprehensive audit logs for tracking and reporting.

Results

Eliminate human error in access control management, reducing errors by 95% and saving administrator time.
Improve developer productivity by reducing access issues.
Enhance security posture with granular controls and auditing.
Simplify administration through centralized management and automation.
Increase agility and scalability to accommodate future growth.

Features and benefits of Access Control Plus

1. LDAP/Active directory integration:

ACP integrates seamlessly with LDAP and Active Directory, enabling centralized user authentication and authorization. This integration simplifies user management, automates provisioning and de-provisioning, enhances security, and reduces administrative overhead.

2. Fine-grained access control:

ACP provides organizations with precise control over user permissions, enforcing the principle of least privilege to protect source code. It prevents unauthorized access, reduces security risks, and integrates with LDAP and Active Directory for simplified user management. ACP ensures only authorized users can access sensitive code, enhancing security and code quality.

3. Repository templates:

ACP simplifies repository management by using templates to define access control and file locations for Git and Subversion. It streamlines authentication with httpd and SSH key access, reducing administrative effort, ensuring consistency, and minimizing errors.

4. Generic file replication (GFR):

ACP uses Cirata’s Generic File Replication (GFR) technology to synchronize access control changes and authentication files across distributed teams. It ensures consistent policies, improves collaboration, and enhances system availability.

5. Wildcard support:

ACP simplifies permission management with advanced features like wildcard support, allowing administrators to create flexible, pattern-based rules for branch names, tags, and paths. This reduces the need for individual rules, ensuring efficient and consistent access control for common workflows.

Supported environments of Access Control Plus

Authentication

• LDAP
• SSHD
• Apache passwd

Authorization

• Apache
• “svnserve”
• GitMS

Linux

• RHEL 8, 9

• Rocky 8, 9

• Debian 10, 11

• SLES 15

Java

• Oracle

• OpenJDK

“Thank you and the team for all your help, it has been a smooth process and I wish other software vendors provided support as excellent as I have had from Cirata.”

— Bill Corr, Design Infrastructure Manager, onsemi

Cirata's solutions are trusted by hundreds of global brands and industry leaders such as

Explore our in-depth demo videos for Access Control Plus

Frequently asked questions

What level of technical expertise is needed to use and administer Access Control Plus?

Anyone capable of administering a normal Subversion server installation will have sufficient skills to make use of ACP. In fact, ACP will make their life easier in terms of handling the tiny but critical details of creating perfectly formed Authentication and Authorization files and delivering them to the proper location.

Can Access Control Plus integrate with other Cirata products?

Yes, ACP integrates seamlessly with Enterprise Subversion MultiSite and Enterprise Git MultiSite to provide a central source for access control in a replicated environment.

How does Access Control Plus handle access control for different types of repositories?

The core ACP functionality remains the same between Git and SVN however there are some differences in the available rules for each system. For more information contact us to discuss your individual implementation requirements.

How does the 'Generic File Replication (GFR)' feature work in practice?

GFR allows ACP to provide access control files to Cirata’s replication products which can then apply these at each site without the need to manually update each replica.

Can access control be customized for individual users or groups, and are there different permission levels?

Yes, ACP is based on the concept of “teams”. Each user account can be a member of as many teams as necessary. Repository access rules are then applied to teams as required to allow/deny access. ACP can also provide either read-only or read-write access as required.

How can administrators use wildcards to define access control rules effectively?

ACP supports a variety of SVN wildcards. To do so it provides an implementation of rule priorities in order to enable the administrator to sort the rules in a desired order to achieve their desired outcome.

What specific versions of LDAP and Active Directory are compatible with Access Control Plus?

ACP is compatible with any LDAP provider. Updates in-line with the SVN OpenSource releases.

What is the expected performance of Access Control Plus when managing a large number of repositories and users?

ACP can scale from very small to very large environments. It has been proven to work with many thousands of repositories.

How does Access Control Plus handle growth in the number of users, repositories, and teams?

The number of users in ACP is limited only by the purchased license. Your Cirata account manager will be able to work with you to increase this at any time.

Can Access Control Plus be integrated into your DevOps environment?

Yes, ACP has 100% REST API coverage enabling your automation to create, modify and remove accounts, rules, repositories, templates and a whole lot more.

Does Access Control Plus have any visibility into end user account repository access?

Combined with capabilities installed with GitMS and MSP, ACP can track the latest access of accounts to your repositories. This enables what we call “Account Access Auditing” so that you can see which repositories and/or accounts are no longer in use and therefore either disable them or remove them from ACP entirely. Be aware: this is not “compliance auditing”.

Access Control Plus

Increase development team collaboration