Re: fetching a single commit from remote repo

["Nikita V. Youshchenko" <yoush@debian.org>]

> Hi,
>
> On Sun, 10 Feb 2008, Nikita V. Youshchenko wrote:
> > I'm looking for a way to fetch a single snapshot, without history,
> > from remote git repository.
> >
> > I've found how to do it with a head (clone --depth 1, or fetch --depth
> > 1).
> >
> > Is it possible to do the same with non-head and non-tagged commit, if
> > only sha1 name of the commit is known?
> > Looks like fetch and fetch-pack only take ref names :(
>
> Yes, for security reasons.

I can't understand what security issues this may cause ...

If one has enough access to a repository to clone it, he already has a way 
to download each and every object from there.

Ability to fetch the tree corresponding to particular commit won't add any 
new permissions to him, will it?

I'm looking for a way to get a copy of a particular previous state of the 
project tree, without having to download entire tree. Something similar 
checking out particular svn revision.
This is going to be wrapped into a script, which is intended to be executed 
by people without any knowledge of any VC system at all. Commit id could 
be a parameter for such a script.

Nikita