You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@subversion.apache.org by Res Pons <po...@hotmail.com> on 2006/04/18 22:59:35 UTC
SVN Access
I'm running Apache2 with SVN 1.3.0 and I'm going to use an access file to
restrict access.
I've go the file to work and here's a copy of what's in my httpconf and the
access file respectively
<Location /svn>
DAV svn
SVNPath /local1/svn
#SVNParentPath /local1/svn
# SVNIndexXSLT "/usr/local/apache2/svnindex.xsl"
AuthzSVNAccessFile /local1/svn/conf/svn-access-file
#Satisfy Any
Require valid-user
AuthType Basic
AuthName "Subversion Access"
AuthUserFile /local1/svn/conf/svn-pwd-file
</Location>
----------------------
[groups]
svnAdmin = user1, user2
svnTags = user1
svnWriteGroup = user1, user2, user3, user4,
svnReadGroup = user5, user6,
svntesters = testuser
svnScripts = user1, user4
[/]
* = r
@svnAdmin = rw
[/proj1]
@svnWriteGroup = rw
@svnReadGroup = r
[/proj1/tags]
@svnTags = rw
@svnWriteGroup =
@svnReadGroup =
@svnAdmin =
[/proj2]
@svntesters =
@svnWriteGroup =
#siravani =
@svnAdmin =
[/proj3]
@svnScripts = rw
and so on....
.
.
.
------------------------------
My QUESTION is: if a project is not listed in the access file, by default
only inherits * = r from the root? Which means I have to list EVERY project
and have a precise plan as to whom can or can't access what have you? Am I
on the right track with this set up? Feeback please.
Thanks.
_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today - it's FREE!
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: SVN Access
Posted by Res Pons <po...@hotmail.com>.
Thanks for the reply Frank. I have about 9 to 10 separate projects, all in
one repository. They're all part of the same product but independent of
each other pretty much.
----Original Message Follows----
From: Frank Gruman <fg...@verizon.net>
To: Res Pons <po...@hotmail.com>
CC: users@subversion.tigris.org
Subject: Re: SVN Access
Date: Mon, 24 Apr 2006 08:23:05 -0400
MIME-Version: 1.0
Received: from vms040pub.verizon.net ([206.46.252.40]) by
bay0-mc4-f19.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.1830); Mon, 24
Apr 2006 05:23:44 -0700
Received: from [127.0.0.1] ([63.163.61.3]) by vms040.mailsrvcs.net (Sun Java
System Messaging Server 6.2-4.02 (built Sep 9 2005)) with ESMTPA id
<0I...@vms040.mailsrvcs.net> for pons32@hotmail.com; Mon, 24 Apr
2006 07:22:59 -0500 (CDT)
X-Message-Info: JGTYoYF78jFLJeexrXB3NPNwmwoiJmHaf/Mobgq/k5w=
References: <BA...@phx.gbl>
User-Agent: Thunderbird 1.5 (Windows/20051201)
Return-Path: fgatwork@verizon.net
X-OriginalArrivalTime: 24 Apr 2006 12:23:44.0525 (UTC)
FILETIME=[EDE123D0:01C66799]
Res Pons wrote:
>
>My QUESTION is: if a project is not listed in the access file, by default
>only inherits * = r from the root? Which means I have to list EVERY
>project and have a precise plan as to whom can or can't access what have
>you? Am I on the right track with this set up? Feeback please.
>
>Thanks.
>
You are on the right track. How many projects do you have??
I have multiple projects, but have them set up as separate repositories
generally broken down into applications. Although some of the applications
work together, they are still separate (non-shared code), and my permissions
files are not individually huge.
In short - if you want to control a directory, you have to enter that
directory and its permissions. Doesn't matter how many projects or
directories you have.
Regards,
Frank
_________________________________________________________________
Don�t just search. Find. Check out the new MSN Search!
http://search.msn.click-url.com/go/onm00200636ave/direct/01/
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: SVN Access
Posted by Frank Gruman <fg...@verizon.net>.
Res Pons wrote:
>
> My QUESTION is: if a project is not listed in the access file, by
> default only inherits * = r from the root? Which means I have to list
> EVERY project and have a precise plan as to whom can or can't access
> what have you? Am I on the right track with this set up? Feeback
> please.
>
> Thanks.
>
You are on the right track. How many projects do you have??
I have multiple projects, but have them set up as separate repositories
generally broken down into applications. Although some of the
applications work together, they are still separate (non-shared code),
and my permissions files are not individually huge.
In short - if you want to control a directory, you have to enter that
directory and its permissions. Doesn't matter how many projects or
directories you have.
Regards,
Frank
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
SVN Access
Posted by Res Pons <po...@hotmail.com>.
REPOSTING AGAIN: Does anyone know the answer to my question?
I'm running Apache2 with SVN 1.3.0 and I'm going to use an access file to
restrict access.
I've go the file to work and here's a copy of what's in my httpconf and the
access file respectively
---------------- apache httpd.conf---------------------------
<Location /svn>
DAV svn
SVNPath /local1/svn
#SVNParentPath /local1/svn
# SVNIndexXSLT "/usr/local/apache2/svnindex.xsl"
AuthzSVNAccessFile /local1/svn/conf/svn-access-file
#Satisfy Any
Require valid-user
AuthType Basic
AuthName "Subversion Access"
AuthUserFile /local1/svn/conf/svn-pwd-file
</Location>
---------------------- the access file --------------------
[groups]
svnAdmin = user1, user2
svnTags = user1
svnWriteGroup = user1, user2, user3, user4,
svnReadGroup = user5, user6,
svntesters = testuser
svnScripts = user1, user4
[/]
* = r
@svnAdmin = rw
[/proj1]
@svnWriteGroup = rw
@svnReadGroup = r
[/proj1/tags]
@svnTags = rw
@svnWriteGroup =
@svnReadGroup =
@svnAdmin =
[/proj2]
@svntesters =
@svnWriteGroup =
#siravani =
@svnAdmin =
[/proj3]
@svnScripts = rw
and so on....
.
.
.
------------------------------
My QUESTION is: if a project is not listed in the access file, by default
only inherits * = r from the root? Which means I have to list EVERY project
and have a precise plan as to whom can or can't access what have you? Am I
on the right track with this set up? Feeback please.
Thanks.
_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today - it's FREE!
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
_________________________________________________________________
On the road to retirement? Check out MSN Life Events for advice on how to
get there! http://lifeevents.msn.com/category.aspx?cid=Retirement
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org