You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@subversion.apache.org by Andrey Repin <an...@freemail.ru> on 2009/04/07 15:59:24 UTC
Access rules (AuthzSVNAccessFile) without redundancy?
Greetings, All!
It is possible to have AuthzSVNAccessFile rules applied without redundant
bloating of that file?
I already have my users authenticated against given group in users registry
<IfModule sspi_auth_module>
Allow from all
AuthName "Subversion repository"
AuthType SSPI
SSPIAuth On
SSPIAuthoritative On
SSPIOfferBasic On
SSPIOmitDomain On
SSPIUsernameCase lower
SSPIBasicPreferred On
# only developers may access the repository
Require group "DAEMON1\CVS"
# And they should obey to SVN user permissions file
<IfModule authz_svn_module>
AuthzSVNAccessFile "C:/home/svn/.registry"
</IfModule>
</IfModule>
But I need to make one user to have only read-only access, so i can use it
for exports... with relative safety.
It is possible to do without hooks, using only authorization/authentication
mechanisms?
I've tried
[/]
* = rw
svnprojects = r
But "* = rw" takes precedence over specific user rights :/
--
WBR,
Andrey Repin (anrdaemon@freemail.ru) 07.04.2009, <19:52>
Sorry for my terrible english...
------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=1579163
To unsubscribe from this discussion, e-mail: [users-unsubscribe@subversion.tigris.org].
Re: [Solved] Access rules (AuthzSVNAccessFile) without redundancy?
Posted by Andrey Repin <an...@freemail.ru>.
Greetings, Andrey Repin!
> It is possible to have AuthzSVNAccessFile rules applied without redundant
> bloating of that file?
> I already have my users authenticated against given group in users registry
> <IfModule sspi_auth_module>
> Allow from all
> AuthName "Subversion repository"
> AuthType SSPI
> SSPIAuth On
> SSPIAuthoritative On
> SSPIOfferBasic On
> SSPIOmitDomain On
> SSPIUsernameCase lower
> SSPIBasicPreferred On
> # only developers may access the repository
> Require group "DAEMON1\CVS"
> # And they should obey to SVN user permissions file
> <IfModule authz_svn_module>
> AuthzSVNAccessFile "C:/home/svn/.registry"
> </IfModule>
> </IfModule>
> But I need to make one user to have only read-only access, so i can use it
> for exports... with relative safety.
> It is possible to do without hooks, using only authorization/authentication
> mechanisms?
> I've tried
> [/]
> * = rw
> svnprojects = r
> But "* = rw" takes precedence over specific user rights :/
[/]
* = r
~svnprojects = rw
Kitties! Or kudos... whatever you prefer! To the SVNBOOK authors.
--
WBR,
Andrey Repin (anrdaemon@freemail.ru) 07.04.2009, <20:29>
Sorry for my terrible english...
------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=1579642
To unsubscribe from this discussion, e-mail: [users-unsubscribe@subversion.tigris.org].