Is there a way to prevent people to run dvc gc with the “–cloud” option ?
To give a bit more context, we would want to put dvc in place in our company with a SSH remote storage but we realized there was no user management in DVC for now. So every people would be able to push to the remote, but also to garbage collect. For data safety purposes, this is not something we want. To the best of our knowledge, there is also no possibility to restrict directly on the SSH storage side beause there is no way to authorize write access but no deletion access.
What we would want is to have only an “admin” user that could run this garbage collection on the remote.