[cvsnt] cvs chacl usage problem - permission on HEAD

[Yan Cheng Cheok]

hi, i try to use cvs chacl to implement the following policy

1. user foo has write permission at HEAD branch and other branches
2. other users does not have write permission at HEAD branch. But they
have write permission at other branches beside HEAD

after cvs chacl, the below are my ACL

e:\sandbox\yccheok>cvs lsacl

Directory: helloworld
Owner: foo

user=foo, branch=HEAD
     all

branch: HEAD
        read
        write(deny)
        create
        tag(deny)
        control(deny)

<default>
        read
        write
        create
        tag
        control

however, when user yccheok try to check in a modified file with sticky
tag yccheok (non-HEAD), he will get the error

cvs server: user yccheok is unable to write to
helloworld/helloworld/helloworld.c - ignoring.

i thought according the the lsacl, the commiting action on non-head
branch for non foo user, the <default> access control policy should be
applied.

is there anything wrong with my ACL?

thank you

cheok