您如何让人们在不暴露整个代码库的情况下从事项目工作？ [英] How do you let people work on a project without exposing them to the whole code base?

问题描述

我是OnePage的联合创始人兼CTO（ http://myOnePage.com/joel ） 。

I'm Co-Founder and CTO of OnePage (http://myOnePage.com/joel).

我很想听听您对这个特定问题的看法和答案：

I'd be interested to hear your views and answers to this particular problem:

我是某些Yahoo!或Google不会向开发人员公开其全部代码！我只是想知道您使用什么方法来限制人们查看完整的代码？在所有项目中，显然会有一部分代码包含重要的数据库和API密钥访问凭据。

I'm certain Yahoo! or Google don't expose their entire code to their developers! I was just wondering what method you use to restrict people from seeing the full code? In all projects there will obviously be parts of the code which contain important access credentials for database and API keys.

谢谢

推荐答案

从长期来看，不允许开发人员访问代码肯定会产生反作用。它将限制它们在添加新功能方面具有生产性/有效性。所以恕我直言，对此进行重新思考。雇用您信任的人并让他们访问代码比限制代码要好。其次，您正在尝试限制程序代码行或数据库详细信息，登录凭据等吗？
登录数据库的凭据通常位于属性文件中。您可以加密属性文件的内容，并混淆读取属性文件并将其解密的代码。
为了确保程序员不理解代码，您可以混淆代码库。

Not allowing the developers to access the code will definately prove counter productive in the long-term. It would restrict them to be productive/effective in adding new functionality. So IMHO, rethink on this. Its better to hire people whom you trust and let them access the code than trying to restrict it. Secondly, What are you trying to restrict Lines of program code or details of database, login credentials etc ? The credntials to login to db generally resides in a properties file. You can encrypt the content of the properties file and obfuscate the code which reads the properties file and decrypts it. To ensure that programmers dont understand the code, you can obfuscate your code libraries. But obfuscation comes with its own baggage.

底线：您正试图解决错误的问题，以限制开发人员访问代码库

Bottom line : you are trying to solve the wrong problem in restrcting developers access to code base

这篇关于您如何让人们在不暴露整个代码库的情况下从事项目工作？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！