I hate pushing out two releases within half an hour, but the permission check should have gone into theme_filefield() instead of the CCK formatter. Releasing this so that people don't do ugly workarounds when they just want theme('filefield', ...) to work correctly.
Unfortunately, it seems I released 1.0 too early. I found that in addition to the cvs.module functionality, project.module also has two (smallish) features that I still need to implement in here. Also, the 1.0 release didn't clean up the variables properly, which is solved in this one. And finally, adapt to an API change of Version Control.
Use this release together with Version Control API 0.9-rc1.